hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 08:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

a little bit change on flask example

Browse Source
This commit is contained in:
amammad
2023-07-24 21:41:44 +10:00
parent 6f8ec118df
commit bbba906ff1
2 changed files with 3 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/example_Flask_safe.py
View File

@@ -7,11 +7,8 @@ app.config.from_pyfile("config3.py")
@app.route('/')
def DEB_EX():
if 'logged_in' not in session:
session['logged_in'] = 'value'
# debuggin whether secret_key is secure or not
return app.secret_key
def CheckForSecretKeyValue():
return app.secret_key, session.get('logged_in')
if __name__ == '__main__':

5
python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/example_Flask_unsafe.py
View File

@@ -14,10 +14,7 @@ app.config.from_object('settings')
@app.route('/')
def DEB_EX():
if 'logged_in' not in session:
session['logged_in'] = 'value'
# debugging whether secret_key is secure or not
def CheckForSecretKeyValue():
return app.secret_key, session.get('logged_in')