hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Modernise falcon library

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2019-09-30 11:00:26 +02:00
parent cae7f9d805
commit 7a112f37cb
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
python/ql/src/semmle/python/web/falcon/General.qll
View File

@@ -3,21 +3,21 @@ import semmle.python.web.Http
/** The falcon API class */
ClassObject theFalconAPIClass() {
result = ModuleObject::named("falcon").attr("API")
ClassValue theFalconAPIClass() {
result = Value::named("falcon.API")
}
/** Holds if `route` is routed to `resource`
*/
private predicate api_route(CallNode route_call, ControlFlowNode route, ClassObject resource) {
route_call.getFunction().(AttrNode).getObject("add_route").refersTo(_, theFalconAPIClass(), _) and
private predicate api_route(CallNode route_call, ControlFlowNode route, ClassValue resource) {
route_call.getFunction().(AttrNode).getObject("add_route").pointsTo().getClass() = theFalconAPIClass() and
route_call.getArg(0) = route and
route_call.getArg(1).refersTo(_, resource, _)
route_call.getArg(1).pointsTo().getClass() = resource
}
private predicate route(FalconRoute route, Function target, string funcname) {
route.getResourceClass().lookupAttribute("on_" + funcname).(FunctionObject).getFunction() = target
route.getResourceClass().lookup("on_" + funcname).(FunctionValue).getScope() = target
}
class FalconRoute extends ControlFlowNode {
@@ -33,7 +33,7 @@ class FalconRoute extends ControlFlowNode {
)
}
ClassObject getResourceClass() {
ClassValue getResourceClass() {
api_route(this, _, result)
}