hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9351 from RasmusWL/django-file-read

Browse Source 
Python: Support `read` on Django file
This commit is contained in:
Rasmus Wriedt Larsen
2022-06-01 10:45:26 +02:00
committed by GitHub
parent 9abd2259d3 5924e88a86
commit 729cf79be7
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
python/ql/test/library-tests/frameworks/django-v2-v3/taint_test.py
View File

@@ -71,6 +71,7 @@ def test_taint(request: HttpRequest, foo, bar, baz=None): # $requestHandler rou
request.FILES["key"].name, # $ tainted
request.FILES["key"].file, # $ tainted
request.FILES["key"].file.read(), # $ tainted
request.FILES["key"].read(), # $ tainted
request.FILES.get("key"), # $ tainted
request.FILES.get("key").name, # $ tainted