hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add cherrypy handler function return values as taint sinks.

Browse Source
This commit is contained in:
Mark Shannon
2019-02-27 16:32:45 +00:00
parent 6c82be8bda
commit 91a1cc9f0b
5 changed files with 44 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
python/ql/test/library-tests/web/cherrypy/Sinks.expected Normal file
View File

@@ -0,0 +1,3 @@
| red.py:8 | Str | externally controlled string |
| test.py:11 | BinaryExpr | externally controlled string |
| test.py:17 | BinaryExpr | externally controlled string |

10
python/ql/test/library-tests/web/cherrypy/Sinks.ql Normal file
View File

@@ -0,0 +1,10 @@
import python
import semmle.python.web.HttpRequest
import semmle.python.web.HttpResponse
import semmle.python.security.strings.Untrusted
from TaintSink sink, TaintKind kind
where sink.sinks(kind)
select sink.getLocation().toString(), sink.(ControlFlowNode).getNode().toString(), kind