Python: Add RemoteFlowSource for django handler without route

A bit scary that we don't have any tests to indicate that I forgot to add this :O
This commit is contained in:
Rasmus Wriedt Larsen
2020-12-21 17:41:46 +01:00
parent d4d6f0ca0c
commit 05ab6cd54a

View File

@@ -1909,6 +1909,8 @@ private module Django {
RemoteFlowSource::Range, DataFlow::ParameterNode {
DjangoRouteHandlerRequestParam() {
this.getParameter() = any(DjangoRouteSetup setup).getARequestHandler().getRequestParam()
or
this.getParameter() = any(DjangoViewClassHandlerWithoutKnownRoute setup).getRequestParam()
}
override string getSourceType() { result = "django.http.request.HttpRequest" }