hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-11 17:59:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6330 from porcupineyhairs/pyPathTraversal

Browse Source 
Python : Add Flask sinks for path injection query
This commit is contained in:
Rasmus Wriedt Larsen
2021-10-28 11:39:40 +02:00
committed by GitHub
parent 9478faf040 d9e5d179d2
commit 6d09334cba
2 changed files with 40 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
python/ql/lib/semmle/python/frameworks/Flask.qll
View File

@@ -519,4 +519,32 @@ module Flask {
override DataFlow::Node getValueArg() { none() }
}
/**
* A call to `flask.send_from_directory`.
*
* See https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_from_directory
*/
class FlaskSendFromDirectory extends FileSystemAccess::Range, DataFlow::CallCfgNode {
FlaskSendFromDirectory() {
this = API::moduleImport("flask").getMember("send_from_directory").getACall()
}
override DataFlow::Node getAPathArgument() {
result in [this.getArg(_), this.getArgByName(["directory", "filename"])]
}
}
/**
* A call to `flask.send_file`.
*
* See https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_file
*/
class FlaskSendFile extends FileSystemAccess::Range, DataFlow::CallCfgNode {
FlaskSendFile() { this = API::moduleImport("flask").getMember("send_file").getACall() }
override DataFlow::Node getAPathArgument() {
result in [this.getArg(0), this.getArgByName("filename_or_fp")]
}
}
}