hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5485 from RasmusWL/django-queryset-chains

Browse Source 
Approved by tausbn
This commit is contained in:
CodeQL CI
2021-04-12 08:49:31 -07:00
committed by GitHub
parent d35a501121 c8a6e837b5
commit bc56d16c18
3 changed files with 55 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/change-notes/2021-03-22-django-queryset-chains.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* Improved modeling of `django` to recognize QuerySet chains such as `User.objects.using("db-name").exclude(username="admin").extra("some sql")`. This can lead to new results for `py/sql-injection`.