hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Remove unused unsafeFilter predicates

Browse Source
This commit is contained in:
Taus
2023-11-28 13:54:17 +00:00
parent 91643ad08f
commit 6e279183d9
1 changed files with 0 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
python/ql/lib/semmle/python/security/dataflow/TarSlipCustomizations.qll
View File

@@ -55,21 +55,6 @@ module TarSlip {
ExcludeTarFilePy() { this.getLocation().getFile().getBaseName() = "tarfile.py" }
}
private DataFlow::TypeTrackingNode unsafeFilter(DataFlow::TypeTracker t) {
t.start() and
(
result.asExpr().(StrConst).getS() = "fully_trusted"
or
result.asExpr() instanceof None
)
or
exists(DataFlow::TypeTracker t2 | result = unsafeFilter(t2).track(t2, t))
}
private DataFlow::Node unsafeFilter() {
unsafeFilter(DataFlow::TypeTracker::end()).flowsTo(result)
}
/**
* Holds if `call` has an unsafe extraction filter, either by default (as the default is unsafe),
* or by being set to an explicitly unsafe value, such as `"fully_trusted"`, or `None`.