hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Create re.compile().ReMethod test

Browse Source
This commit is contained in:
jorgectf
2021-03-26 16:21:34 +01:00
parent be09ffec3f
commit c127b109d0
2 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/src/experimental/Security/CWE-730/re_bad.py → python/ql/src/experimental/Security/CWE-730/unit_tests/re_bad.py
View File

@@ -1,3 +1,5 @@
# move outside test folder
from flask import request, Flask
import re
@@ -7,16 +9,18 @@ app = Flask(__name__)
@app.route("/direct")
def direct():
pattern = request.args['pattern']
re.search(pattern, "")
@app.route("/compile")
def compile():
pattern = re.compile(request.args['pattern'])
pattern.search("")
@app.route("/compile_direct")
def compile_direct():
re.compile(request.args['pattern']).search("")
# if __name__ == "__main__":
# app.run(debug=True)

9
python/ql/src/experimental/Security/CWE-730/re_good.py → python/ql/src/experimental/Security/CWE-730/unit_tests/re_good.py
View File

@@ -1,3 +1,5 @@
# move outside test folder
from flask import request, Flask
import re
@@ -7,16 +9,19 @@ app = Flask(__name__)
@app.route("/direct")
def direct():
pattern = re.escape(request.args['pattern'])
re.search(pattern, "")
@app.route("/compile")
def compile():
pattern = re.compile(re.escape(request.args['pattern']))
pattern.search("")
@app.route("/compile_direct")
def compile_direct():
re.compile(re.escape(request.args['pattern'])).search("")
# if __name__ == "__main__":
# app.run(debug=True)