Python : Add query to detect Server Side Template Injection

python/ql/test/query-tests/Security/lib/airspeed.py

@@ -0,0 +1,3 @@
+class Template:
+    def __init__(self, content, filename="<string>"):
+        pass

python/ql/test/query-tests/Security/lib/cheetah/Template/__init__.py

@@ -0,0 +1,2 @@
+class Template(object):
+    pass

python/ql/test/query-tests/Security/lib/chevron.py

@@ -0,0 +1,6 @@
+
+
+def render(template='', data={}, partials_path='.', partials_ext='mustache',
+    partials_dict={}, padding='', def_ldel='{{', def_rdel='}}',
+    scopes=None):
+    pass

python/ql/test/query-tests/Security/lib/flask/__init__.py

@@ -28,3 +28,6 @@ def make_response(rv):
 
 def escape(txt):
     return Markup.escape(txt)
+
+def render_template_string(source, **context):
+    pass

python/ql/test/query-tests/Security/lib/jinja2.py

@@ -18,3 +18,6 @@ class FileSystemLoader(object):
 
     def __init__(self, searchpath):
         pass
+
+def from_string(source, globals=None, template_class=None):
+    pass