mirror of
https://github.com/github/codeql.git
synced 2026-05-04 05:05:12 +02:00
Python: Model await request.post() as MultiDictProxy
as highlight as being quite easy to do by @yoff 👍
This commit is contained in:
@@ -104,7 +104,7 @@ async def test_taint(request: web.Request): # $ requestHandler
|
||||
|
||||
# multidict.MultiDictProxy[str] (see `multidict` framework tests)
|
||||
await request.post(), # $ tainted
|
||||
(await request.post()).getone("key"), # $ MISSING: tainted
|
||||
(await request.post()).getone("key"), # $ tainted
|
||||
)
|
||||
|
||||
import yarl
|
||||
|
||||
Reference in New Issue
Block a user