hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Fix handling of turbogears' 'expose' decorator.

Browse Source
This commit is contained in:
Mark Shannon
2019-02-26 16:40:21 +00:00
parent 3854050d57
commit 2995b023fa
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
python/ql/src/semmle/python/web/turbogears/TurboGears.qll
View File

@@ -19,14 +19,10 @@ class TurboGearsControllerMethod extends Function {
TurboGearsControllerMethod() {
aTurboGearsControllerClass().getPyClass() = this.getScope() and
decorator = this.getADecorator().getAFlowNode() and
/* Is decorated with @expose or @expose(path) */
/* Is decorated with @expose() or @expose(path) */
(
decorator.(NameNode).getId() = "expose"
or
decorator.(CallNode).getFunction().(NameNode).getId() = "expose"
or
decorator.refersTo(ModuleObject::named("tg").getAttribute("expose"))
or
decorator.refersTo(_, ModuleObject::named("tg").getAttribute("expose"), _)
)
}