hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Handle view functions with decorators

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-02-10 15:47:55 +01:00
parent eb7e30d472
commit 42eceb80bd
3 changed files with 23 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/change-notes/2021-12-21-django-view-function-with-decorator.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* Improved modeling of `django` to recognize request handlers functions that are decorated (for example with `django.views.decorators.http.require_GET`). This leads to more sources of remote user input (`RemoteFlowSource`), since we correctly identify the first parameter as being passed a django request.