hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 04:39:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add basic rest_framework Request modeling

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-10-29 14:48:53 +02:00
parent 57e13c6066
commit 5d77e62f3a
2 changed files with 67 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/test/library-tests/frameworks/rest_framework/taint_test.py
View File

@@ -21,7 +21,7 @@ def test_taint(request: Request, routed_param): # $ requestHandler routedParamet
# Has all the standard attributes of a django HttpRequest
# see https://github.com/encode/django-rest-framework/blob/00cd4ef864a8bf6d6c90819a983017070f9f08a5/rest_framework/request.py#L410-L418
ensure_tainted(request.resolve_match.args) # $ MISSING: tainted
ensure_tainted(request.resolver_match.args) # $ tainted
# special new attributes added, see https://www.django-rest-framework.org/api-guide/requests/
ensure_tainted(
@@ -121,7 +121,7 @@ urlpatterns = [
@api_view(["POST"])
def function_based_no_route(request: Request, possible_routed_param): # $ requestHandler routedParameter=possible_routed_param
ensure_tainted(
request, # $ MISSING: tainted
request, # $ tainted
possible_routed_param, # $ tainted
)