hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Suppress None.json.dumps from ExternalAPI queries

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2022-08-16 15:16:59 +02:00
parent 0bdc808a7a
commit 70cc986d5f
3 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
python/ql/src/Security/CWE-020-ExternalAPIs/ExternalAPIs.qll
View File

@@ -43,7 +43,12 @@ private class DefaultSafeExternalApi extends SafeExternalApi {
}
}
/** Gets a human readable representation of `node`. */
/**
* Gets a human readable representation of `node`.
*
* Note that this is only defined for API nodes that are allowed as external APIs,
* so `None.json.dumps` will for example not be allowed.
*/
string apiNodeToStringRepr(API::Node node) {
node = API::builtin(result)
or
@@ -51,7 +56,8 @@ string apiNodeToStringRepr(API::Node node) {
or
exists(API::Node base, string basename |
base.getDepth() < node.getDepth() and
basename = apiNodeToStringRepr(base)
basename = apiNodeToStringRepr(base) and
not base = API::builtin("None")
|
exists(string m | node = base.getMember(m) | result = basename + "." + m)
or