mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Python: add comment with ref
This commit is contained in:
@@ -22,6 +22,8 @@ class StackTraceExposureConfiguration extends TaintTracking::Configuration {
|
||||
sink = any(HTTP::Server::HttpResponse response).getBody()
|
||||
}
|
||||
|
||||
// A stack trace is accessible as the `__traceback__` attribute of a caught exception.
|
||||
// seehttps://docs.python.org/3/reference/datamodel.html#traceback-objects
|
||||
override predicate isAdditionalTaintStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
|
||||
exists(AttrRead attr | attr.getAttributeName() = "__traceback__" |
|
||||
nodeFrom = attr.getObject() and
|
||||
|
||||
Reference in New Issue
Block a user