hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 12:45:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Don't make duplicate sink for Tornado handler

Browse Source 
`self.write(...)` would be treated as *both* TornadoConnectionWrite and
TornadoHttpRequestHandlerWrite
This commit is contained in:
Rasmus Wriedt Larsen
2020-01-07 13:51:03 +01:00
parent effa4548ab
commit 2cdbae08b6
2 changed files with 3 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/test/library-tests/web/tornado/HttpSinks.expected
View File

@@ -1,8 +1,4 @@
| test.py:6:20:6:43 | tornado.HttpRequesHandler.write | externally controlled string |
| test.py:6:20:6:43 | tornado.connection.write | externally controlled string |
| test.py:12:20:12:23 | tornado.HttpRequesHandler.write | externally controlled string |
| test.py:12:20:12:23 | tornado.connection.write | externally controlled string |
| test.py:20:23:20:25 | tornado.HttpRequesHandler.redirect | externally controlled string |
| test.py:26:20:26:48 | tornado.HttpRequesHandler.write | externally controlled string |
| test.py:26:20:26:48 | tornado.connection.write | externally controlled string |
FIXME