Python: Add self.request as RemoteFlowSource for aiohttp View

Just like we do for Django in
7393443f8c/python/ql/src/semmle/python/frameworks/Django.qll (L1786-L1804)
This commit is contained in:
Rasmus Wriedt Larsen
2021-06-01 17:32:56 +02:00
parent c4b618dcf5
commit c69b857662
4 changed files with 55 additions and 31 deletions

View File

@@ -196,7 +196,8 @@ async def test_taint(request: web.Request): # $ requestHandler
class TaintTestClass(web.View):
def get(self): # $ requestHandler
ensure_tainted(
self.request, # $ MISSING: tainted
self.request, # $ tainted
self.request.url # $ tainted
)