mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
Update python/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
You are totally right! I just scanned the module's document and assumed it would implement it all. Pasting the documentation here for future reference https://docs.python.org/3/library/uuid.html?highlight=uuid#uuid.UUID. Co-authored-by: Taus <tausbn@github.com>
This commit is contained in:
@@ -22,7 +22,7 @@ class PredictableResultSource extends DataFlow::Node {
|
||||
exists(API::Node uuidCallRet |
|
||||
uuidCallRet =
|
||||
API::moduleImport("uuid")
|
||||
.getMember(["uuid1", "uuid2", "uuid3", "uuid5"])
|
||||
.getMember(["uuid1", "uuid3", "uuid5"])
|
||||
.getACall()
|
||||
.getReturn()
|
||||
|
|
||||
|
||||
Reference in New Issue
Block a user