Python: Add docs to web/stdlib/Request.qll

This commit is contained in:
Rasmus Wriedt Larsen
2020-04-22 11:26:50 +02:00
parent 26ed911bb2
commit 6eb24011eb

View File

@@ -2,6 +2,7 @@ import python
import semmle.python.security.TaintTracking
import semmle.python.web.Http
/** Source of BaseHTTPRequestHandler instances. */
class StdLibRequestSource extends HttpRequestTaintSource {
StdLibRequestSource() {
exists(ClassValue cls |
@@ -16,6 +17,7 @@ class StdLibRequestSource extends HttpRequestTaintSource {
override predicate isSourceOf(TaintKind kind) { kind instanceof BaseHTTPRequestHandlerKind }
}
/** TaintKind for an instance of BaseHTTPRequestHandler. */
class BaseHTTPRequestHandlerKind extends TaintKind {
BaseHTTPRequestHandlerKind() { this = "BaseHTTPRequestHandlerKind" }
@@ -31,6 +33,7 @@ class BaseHTTPRequestHandlerKind extends TaintKind {
}
}
/** TaintKind for headers (instance of HTTPMessage). */
class HTTPMessageKind extends ExternalStringDictKind {
override TaintKind getTaintOfMethodResult(string name) {
result = super.getTaintOfMethodResult(name)