mirror of
https://github.com/github/codeql.git
synced 2025-12-23 20:26:32 +01:00
Python: Fixup after merging main
This commit is contained in:
@@ -48,7 +48,7 @@ with engine.begin() as connection:
|
||||
# Injection requiring the text() taint-step
|
||||
t = text("some sql")
|
||||
session.query(User).filter(t) # $ getSql=t
|
||||
session.query(User).group_by(User.id).having(t) # $ getSql=Attribute MISSING: getSql=t
|
||||
session.query(User).group_by(User.id).having(t) # $ getSql=User.id MISSING: getSql=t
|
||||
session.query(User).group_by(t).first() # $ getSql=t
|
||||
session.query(User).order_by(t).first() # $ getSql=t
|
||||
|
||||
|
||||
Reference in New Issue
Block a user