From 1e1d42fa352c27bb3b01d9dae2837a3ce2a58550 Mon Sep 17 00:00:00 2001 From: amammad Date: Tue, 25 Jul 2023 00:11:23 +1000 Subject: [PATCH] fix a mistake :( --- .../Security/CWE-287-ConstantSecretKey/examples/config3.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/config3.py b/python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/config3.py index 1bd3acbf06b..02a19dde3e9 100644 --- a/python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/config3.py +++ b/python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/config3.py @@ -7,6 +7,6 @@ FLASK_DEBUG = True # it is good to check default value always, maybe # the user responsible for setup the application make a mistake # and has not changed the default SECRET_KEY value -SECRET_KEY = os.getenv('envKey') # A_CONSTANT_SECRET +SECRET_KEY = os.getenv('envKey', "A_CONSTANT_SECRET") # A_CONSTANT_SECRET if SECRET_KEY == "A_CONSTANT_SECRET": raise "not possible"