hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Autoformat

Browse Source 
I'm not particularly happy about this one, but I don't care to fight about it today.
This commit is contained in:
Rasmus Wriedt Larsen
2020-04-20 16:08:53 +02:00
parent b7145af447
commit 43bc7c6619
1 changed files with 6 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
python/ql/src/semmle/python/security/strings/Basic.qll
View File

@@ -8,37 +8,14 @@ abstract class StringKind extends TaintKind {
StringKind() { this = this }
override TaintKind getTaintOfMethodResult(string name) {
name in [
"capitalize",
"casefold",
"center",
"expandtabs",
"format",
"format_map",
"ljust",
"lstrip",
"lower",
"replace",
"rjust",
"rstrip",
"strip",
"swapcase",
"title",
"upper",
"zfill",
/* encode/decode is technically not correct, but close enough */
"encode",
"decode"
] and
name in ["capitalize", "casefold", "center", "expandtabs", "format", "format_map", "ljust",
"lstrip", "lower", "replace", "rjust", "rstrip", "strip", "swapcase", "title", "upper",
"zfill",
/* encode/decode is technically not correct, but close enough */
"encode", "decode"] and
result = this
or
name in [
"partition",
"rpartition",
"rsplit",
"split",
"splitlines"
] and
name in ["partition", "rpartition", "rsplit", "split", "splitlines"] and
result.(SequenceKind).getItem() = this
}