hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: ignore common words (certain/concert) as sensitive source

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2022-06-22 11:02:00 +02:00
parent abdcfd55c3
commit 5dc2bb717a
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/test/experimental/dataflow/sensitive-data/test.py
View File

@@ -58,8 +58,8 @@ def my_func(password): # $ SensitiveDataSource=password
# FP where the `cert` in `uncertainty` makes us treat it like a certificate
# https://github.com/github/codeql/issues/9632
def my_other_func(uncertainty): # $ SPURIOUS: SensitiveDataSource=certificate
print(uncertainty) # $ SPURIOUS: SensitiveUse=certificate
def my_other_func(uncertainty):
print(uncertainty)
password = some_function() # $ SensitiveDataSource=password
print(password) # $ SensitiveUse=password