hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Two new queries for URL and hostname sanitization (CWE-020).

Browse Source
This commit is contained in:
Mark Shannon
2019-01-24 12:57:14 +00:00
parent ffa8b12d48
commit 88d8cb514c
13 changed files with 385 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/test/query-tests/Security/CWE-020/IncompleteUrlSubstringSanitization.expected Normal file
View File

@@ -0,0 +1,2 @@
| urltest.py:9:8:9:30 | Compare | '$@' may be at an arbitrary position in the sanitized URL. | urltest.py:9:8:9:20 | Str | example.com |
| urltest.py:15:8:15:37 | Attribute() | '$@' may be at an arbitrary position in the sanitized URL. | urltest.py:15:24:15:36 | Str | example.com |