hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added

Browse Source
This commit is contained in:
Kevin Stubbings
2024-08-30 18:17:38 -07:00
parent 5c8c99d31f
commit 326eb6946e
2 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
python/ql/lib/semmle/python/Frameworks.qll
View File

@@ -15,6 +15,7 @@ private import semmle.python.frameworks.Anyio
private import semmle.python.frameworks.Asyncpg
private import semmle.python.frameworks.Baize
private import semmle.python.frameworks.BSon
private import semmle.python.frameworks.Bottle
private import semmle.python.frameworks.CassandraDriver
private import semmle.python.frameworks.Cherrypy
private import semmle.python.frameworks.ClickhouseDriver

21
python/ql/lib/semmle/python/frameworks/Tornado.qll
View File

@@ -605,4 +605,25 @@ module Tornado {
override DataFlow::Node getValueArg() { result in [this.getArg(1), this.getArgByName("value")] }
}
/**
* A call to the `tornado.web.RequestHandler.set_header` method.
*
* See https://www.tornadoweb.org/en/stable/web.html#tornado.web.RequestHandler.set_header
*/
class TornadoRequestHandlerSetHeaderCall extends Http::Server::ResponseHeaderWrite::Range,
DataFlow::MethodCallNode
{
TornadoRequestHandlerSetHeaderCall() {
this.calls(TornadoModule::Web::RequestHandler::instance(), "set_header")
}
override DataFlow::Node getNameArg() { result in [this.getArg(0), this.getArgByName("name")] }
override DataFlow::Node getValueArg() { result in [this.getArg(1), this.getArgByName("value")] }
override predicate nameAllowsNewline() { none() }
override predicate valueAllowsNewline() { none() }
}
}