hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix getFlaskMailArgument()

Browse Source
This commit is contained in:
jorgectf
2021-10-28 13:54:14 +02:00
parent 4c2a4226ef
commit c9634f3c6f
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/experimental/semmle/python/libraries/FlaskMail.qll
View File

@@ -20,10 +20,8 @@ private module FlaskMail {
private DataFlow::CallCfgNode flaskMessageCall() { result = flaskMessageInstance().getACall() }
bindingset[argumentPosition, argumentName]
private DataFlow::Node getFlaskMailArgument(int argumentPosition, string argumentName) {
// 'argumentPosition' is not bound to a value.
argumentName in ["body", "html", "recipients", "sender", "subject"] and
argumentPosition in [0 .. 5] and
result in [
flaskMessageCall().getArg(argumentPosition), flaskMessageCall().getArgByName(argumentName)
]