hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Only allow unsafe positional args to extra

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2020-10-21 14:21:36 +02:00
parent 3a416bce2d
commit 77d4cbc0df
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/experimental/semmle/python/frameworks/Django.qll
View File

@@ -359,7 +359,7 @@ private module Django {
override DataFlow::Node getSql() {
result.asCfgNode() =
[node.getArg([0 .. 5]), node.getArgByName(["select", "where", "tables", "order_by"])]
[node.getArg([0, 1, 3, 4]), node.getArgByName(["select", "where", "tables", "order_by"])]
}
}
}