hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-19 14:04:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

python: CSRF -> Csrf

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2022-03-23 11:29:27 +01:00
parent 53de8287f5
commit 441e206cfa
3 changed files with 25 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
View File

@@ -14,10 +14,10 @@
import python
import semmle.python.Concepts
from CSRFProtectionSetting s
from CsrfProtectionSetting s
where
s.getVerificationSetting() = false and
not exists(CSRFProtection p) and
not exists(CsrfLocalProtection p) and
// rule out test code as this is a common place to turn off CSRF protection
not s.getLocation().getFile().getAbsolutePath().matches("%test%")
select s, "Potential CSRF vulnerability due to forgery protection being disabled or weakened."