hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-23 10:23:41 +01:00
Code Issues Packages Projects Releases Wiki Activity

More copilot suggestions.

Browse Source
This commit is contained in:
REDMOND\brodes
2026-02-10 11:46:16 -05:00
parent a91cf6b7cb
commit 4bb110beb8
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_requests.py
View File

@@ -19,14 +19,14 @@ def ssrf_test2():
def ssrf_test3():
user_input = request.args['untrusted_input']
# NOT OK -- user has full control
response = requests.request('<method>', user_input) # $ Alert[py/full-ssrf]
requests.request('<method>', user_input) # $ Alert[py/full-ssrf]
def ssrf_test_with_policy1():
user_input = request.args['untrusted_input']
policy = AntiSSRFPolicy()
session = policy.get_antissrf_session()
# OK -- dangerous user input is filtered by AntiSSRFPolicy
response = session.get(user_input)
session.get(user_input)
def ssrf_test_with_policy2():
user_input = request.args['untrusted_input']