hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: aiohttp match_info should be tainted

Browse Source 
Whoops
This commit is contained in:
Rasmus Wriedt Larsen
2021-05-26 16:05:36 +02:00
parent 597a9dfc80
commit 63c7fa0c2c
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/semmle/python/frameworks/Aiohttp.qll
View File

@@ -225,7 +225,7 @@ module AiohttpWebModel {
nodeTo.(DataFlow::AttrRead).getAttributeName() in [
"url", "rel_url", "forwarded", "host", "remote", "path", "path_qs", "raw_path", "query",
"headers", "transport", "cookies", "content", "_payload", "content_type", "charset",
"http_range", "if_modified_since", "if_unmodified_since", "if_range"
"http_range", "if_modified_since", "if_unmodified_since", "if_range", "match_info"
]
}
}