hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 11:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add initial rest_framework modeling

Browse Source 
I had to make the Django and PrivateDjango modeling non-private :O
This commit is contained in:
Rasmus Wriedt Larsen
2021-10-29 14:18:52 +02:00
parent a64e939d71
commit 222db37c0d
5 changed files with 80 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/test/library-tests/frameworks/rest_framework/taint_test.py
View File

@@ -89,9 +89,9 @@ def test_taint(request: Request, routed_param): # $ requestHandler routedParamet
class MyClass(APIView):
def initial(self, request, *args, **kwargs):
def initial(self, request, *args, **kwargs): # $ requestHandler
# this method will be called before processing any request
ensure_tainted(request) # $ MISSING: tainted
ensure_tainted(request) # $ tainted
def get(self, request: Request, routed_param): # $ requestHandler routedParameter=routed_param
ensure_tainted(routed_param) # $ tainted
@@ -124,5 +124,5 @@ def function_based_no_route(request: Request, possible_routed_param):
class ClassBasedNoRoute(APIView):
def get(self, request: Request, possible_routed_param):
ensure_tainted(request, possible_routed_param) # $ MISSING: tainted
def get(self, request: Request, possible_routed_param): # $ requestHandler routedParameter=possible_routed_param
ensure_tainted(request, possible_routed_param) # $ tainted