hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix verifiesSignature()

Browse Source
This commit is contained in:
jorgectf
2021-04-04 20:31:07 +02:00
parent 198f8dcc1f
commit d22da880e7
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
python/ql/src/experimental/semmle/python/frameworks/Stdlib.qll
View File

@@ -36,8 +36,7 @@ private module JWT {
PyJWTDecodeCall() { this = API::moduleImport("jwt").getMember("decode").getACall() }
override predicate verifiesSignature() {
not isFalse(this.getArgByName("verify"))
or
not isFalse(this.getArgByName("verify")) and
not exists(KeyValuePair optionsDict, NameConstant falseName |
falseName.getId() = "False" and
optionsDict = this.getArgByName("options").asExpr().(Dict).getItems().getAnItem() and