Update python/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql

You are totally right! I just scanned the module's document and assumed it would implement it all. Pasting the documentation here for future reference https://docs.python.org/3/library/uuid.html?highlight=uuid#uuid.UUID.

Co-authored-by: Taus <tausbn@github.com>
This commit is contained in:
Daniel Santos
2022-10-24 11:49:17 -05:00
committed by GitHub
parent a2ad924376
commit be8780742b

View File

@@ -22,7 +22,7 @@ class PredictableResultSource extends DataFlow::Node {
exists(API::Node uuidCallRet |
uuidCallRet =
API::moduleImport("uuid")
.getMember(["uuid1", "uuid2", "uuid3", "uuid5"])
.getMember(["uuid1", "uuid3", "uuid5"])
.getACall()
.getReturn()
|