hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Autoformat and fix broken module reference

Browse Source
This commit is contained in:
Taus
2023-03-27 12:16:44 +00:00
parent 11c89adbe3
commit 0b4c85f8d2
1 changed files with 15 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
python/ql/src/experimental/semmle/python/security/TimingAttack.qll
View File

@@ -218,7 +218,7 @@ private class FlaskClientSuppliedSecret extends ClientSuppliedSecret {
private class DjangoClientSuppliedSecret extends ClientSuppliedSecret {
DjangoClientSuppliedSecret() {
this =
PrivateDjango::DjangoImpl::Http::Request::HttpRequest::classRef()
PrivateDjango::DjangoImpl::DjangoHttp::Request::HttpRequest::classRef()
.getMember(["headers", "META"])
.getMember("get")
.getACall() and
@@ -316,36 +316,35 @@ class CompareSink extends DataFlow::Node {
exists(Compare compare |
(
compare.getOp(0) instanceof Eq or
compare.getOp(0) instanceof NotEq
compare.getOp(0) instanceof NotEq
) and
(
compare.getLeft() = this.asExpr() and
not compare.getComparator(0).(StrConst).getText() = "bearer"
not compare.getComparator(0).(StrConst).getText() = "bearer"
or
compare.getComparator(0) = this.asExpr() and
not compare.getLeft().(StrConst).getText() = "bearer"
not compare.getLeft().(StrConst).getText() = "bearer"
)
) or
exists(Compare compare |
(
compare.getOp(0) instanceof IsNot
) and
)
or
exists(Compare compare |
compare.getOp(0) instanceof IsNot and
(
compare.getLeft() = this.asExpr() and
not compare.getComparator(0) instanceof None
or
compare.getComparator(0) = this.asExpr() and
not compare.getLeft() instanceof None
)
)
)
)
}
/**
* Holds if there is a flow to len().
*/
/**
* Holds if there is a flow to len().
*/
predicate flowtolen() {
exists(ExcludeLenFunc config, DataFlow2::PathNode source, DataFlow2::PathNode sink |
config.hasFlowPath(source, sink)
config.hasFlowPath(source, sink)
)
}
}