hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Django: Model any class used in django route setup as view class

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-02-10 16:26:25 +01:00
parent b428945bc2
commit ca0d345987
3 changed files with 38 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
python/change-notes/2021-12-21-django-view-function-with-decorator.md → python/change-notes/2021-12-21-django-improvements.md
View File

@@ -1,2 +1,3 @@
lgtm,codescanning
* Improved modeling of `django` to recognize request handlers functions that are decorated (for example with `django.views.decorators.http.require_GET`). This leads to more sources of remote user input (`RemoteFlowSource`), since we correctly identify the first parameter as being passed a django request.
* Improved modeling of django View classes. We now consider any class using in a routing setup with `<class>.as_view()` as django view class. This leads to more sources of remote user input (`RemoteFlowSource`), since we correctly identify the first parameter as being passed a django request.