hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 13:15:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
This commit is contained in:
yoff
2020-10-21 12:55:38 +02:00
committed by GitHub
parent 90d0cff384
commit 8e7e107365
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
python/ql/src/experimental/semmle/python/frameworks/Django.qll
View File

@@ -295,7 +295,13 @@ private module Django {
override DataFlow::Node getSql() { result.asCfgNode() = raw.getArg(0) }
}
/** A call to the `raw` function on a model. */
/**
* A call to the `raw` function on a model.
*
* See
* - https://docs.djangoproject.com/en/3.1/topics/db/sql/#django.db.models.Manager.raw
* - https://docs.djangoproject.com/en/3.1/ref/models/querysets/#raw
*/
private class ObjectsRaw extends SqlExecution::Range, DataFlow::CfgNode {
override CallNode node;
@@ -304,7 +310,11 @@ private module Django {
override DataFlow::Node getSql() { result.asCfgNode() = node.getArg(0) }
}
/** A call to the `raw` function on a model. */
/**
* A call to the `extra` function on a model.
*
* See https://docs.djangoproject.com/en/3.1/ref/models/querysets/#extra
*/
private class ObjectsExtra extends SqlExecution::Range, DataFlow::CfgNode {
override CallNode node;