diff --git a/python/ql/src/semmle/python/frameworks/Django.qll b/python/ql/src/semmle/python/frameworks/Django.qll index 74c1856a79b..3e7283208e7 100644 --- a/python/ql/src/semmle/python/frameworks/Django.qll +++ b/python/ql/src/semmle/python/frameworks/Django.qll @@ -1905,9 +1905,10 @@ private module Django { // --------------------------------------------------------------------------- // HttpRequest taint modeling // --------------------------------------------------------------------------- - class DjangoRouteHandlerRequestParam extends django::http::request::HttpRequest::InstanceSource, + /** A parameter that will receive the django `HttpRequest` instance when a request handler is invoked. */ + private class DjangoRequestHandlerRequestParam extends django::http::request::HttpRequest::InstanceSource, RemoteFlowSource::Range, DataFlow::ParameterNode { - DjangoRouteHandlerRequestParam() { + DjangoRequestHandlerRequestParam() { this.getParameter() = any(DjangoRouteSetup setup).getARequestHandler().getRequestParam() or this.getParameter() = any(DjangoViewClassHandlerWithoutKnownRoute setup).getRequestParam()