mirror of
https://github.com/github/codeql.git
synced 2026-04-28 02:05:14 +02:00
Python: remove strange sink
It is not clear from the code how this could happen and I do not remember the path I saw, perhaps it was unreasonable.
This commit is contained in:
@@ -8,7 +8,6 @@ extensions:
|
||||
pack: codeql/python-all
|
||||
extensible: sinkModel
|
||||
data:
|
||||
- ["subprocess.Popen!","Subclass.Call.Argument[0,args:]", "log-injection"]
|
||||
- ["zipfile.ZipFile","Member[extractall].Argument[0,path:]", "path-injection"]
|
||||
|
||||
- addsTo:
|
||||
|
||||
Reference in New Issue
Block a user