Python: Don't consider has_body tainted

Although it technically is, I think it belong in the section of things
that are unlikely to be exploitable
This commit is contained in:
Rasmus Wriedt Larsen
2021-05-26 15:57:02 +02:00
parent d953ea47d4
commit 597a9dfc80
2 changed files with 5 additions and 6 deletions

View File

@@ -66,9 +66,6 @@ async def test_taint(request: web.Request): # $ requestHandler
request.content, # $ tainted
request._payload, # $ tainted
request.body_exists, # $ tainted
request.has_body, # $ tainted
request.content_type, # $ tainted
request.charset, # $ tainted
@@ -116,6 +113,9 @@ async def test_taint(request: web.Request): # $ requestHandler
request.keep_alive,
request.content_length,
request.body_exists,
request.has_body,
request.can_read_body,
)
ensure_not_tainted(