hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Model wsgiref.simple_server applications

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-11-15 11:28:13 +01:00
parent e812029c03
commit 6eb4525ab2
3 changed files with 167 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
python/ql/test/library-tests/frameworks/stdlib/wsgiref_simple_server_test.py
View File

@@ -12,18 +12,18 @@ ADDRESS = ("localhost", 8000)
# I wanted to showcase that we handle both functions and bound-methods, so it's possible
# to run this test-file in 2 different ways.
def func(environ, start_response): # $ MISSING: requestHandler
def func(environ, start_response): # $ requestHandler
ensure_tainted(
environ, # $ MISSING: tainted
environ["PATH_INFO"], # $ MISSING: tainted
environ, # $ tainted
environ["PATH_INFO"], # $ tainted
)
write = start_response("200 OK", [("Content-Type", "text/plain")])
write(b"hello") # $ MISSING: HttpResponse responseBody=b"hello"
write(data=b" ") # $ MISSING: HttpResponse responseBody=b" "
write(b"hello") # $ HttpResponse responseBody=b"hello"
write(data=b" ") # $ HttpResponse responseBody=b" "
# function return value should be an iterable that will also be written to to the
# response.
return [b"world", b"!"] # $ MISSING: HttpResponse responseBody=List
return [b"world", b"!"] # $ HttpResponse responseBody=List
class MyServer(wsgiref.simple_server.WSGIServer):
@@ -44,9 +44,9 @@ elif case == "2":
server = MyServer()
elif case == "3":
server = MyServer()
def func3(_env, start_response): # $ MISSING: requestHandler
def func3(_env, start_response): # $ requestHandler
start_response("200 OK", [])
return [b"foo"] # $ MISSING: HttpResponse responseBody=List
return [b"foo"] # $ HttpResponse responseBody=List
server.set_app(func3)
else:
sys.exit("wrong case")