Update python/ql/test/experimental/dataflow/model-summaries/model_summaries.py

Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
This commit is contained in:
yoff
2023-06-22 11:31:21 +02:00
committed by GitHub
parent cb2de69f5a
commit 0f8ebd1519

View File

@@ -120,7 +120,14 @@ ensure_tainted(
tainted_list_implicit[0] # $ tainted
)
# Modeled flow-summary is not value preserving
from json import MS_loads as json_loads
# so no data-flow
SINK_F(json_loads(SOURCE))
SINK_F(json_loads(SOURCE)[0])
# but has taint-flow
tainted_resultlist = json_loads(TAINTED_STRING)
ensure_tainted(
tainted_resultlist, # $ tainted