hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix Mongoengine test

Browse Source
This commit is contained in:
jorgectf
2021-03-31 17:50:31 +02:00
parent 7a4dc46341
commit 5a1dc48e48
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/test/experimental/query-tests/Security/CWE-943/flask_mongoengine_bad.py
View File

@@ -23,7 +23,7 @@ Movie(title='bb').save()
def home_page():
unsanitized_search = json.loads(request.args['search'])
data = Movie.objects(title=unsanitized_search)
data = Movie.objects(unsanitized_search)
return data.to_json()
# if __name__ == "__main__":

2
python/ql/test/experimental/query-tests/Security/CWE-943/flask_mongoengine_good.py
View File

@@ -25,7 +25,7 @@ def home_page():
unsanitized_search = json.loads(request.args['search'])
sanitize(unsanitized_search)
data = Movie.objects(title=unsanitized_search)
data = Movie.objects(unsanitized_search)
return data.to_json()
# if __name__ == "__main__":