hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 02:44:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add links to function docs

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2020-10-21 13:03:14 +02:00
parent 8e7e107365
commit e44247bb00
1 changed files with 17 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
python/ql/src/experimental/semmle/python/frameworks/Django.qll
View File

@@ -264,7 +264,13 @@ private module Django {
exists(DataFlow::TypeTracker t2 | result = classRawSQL(t2).track(t2, t))
}
/** Gets a reference to the `django.db.models.expressions.RawSQL` class. */
/**
* Gets a reference to the `django.db.models.expressions.RawSQL` class.
*
* See
* - https://docs.djangoproject.com/en/3.1/topics/db/sql/#executing-custom-sql-directly
* - https://docs.djangoproject.com/en/3.1/topics/db/sql/#connections-and-cursors
*/
DataFlow::Node classRawSQL() { result = classRawSQL(DataFlow::TypeTracker::end()) }
}
}
@@ -281,7 +287,11 @@ private module Django {
}
}
/** A call to the `annotate` function on a model using a `RawSQL` argument. */
/**
* A call to the `annotate` function on a model using a `RawSQL` argument.
*
* See https://docs.djangoproject.com/en/3.1/ref/models/querysets/#annotate
*/
private class ObjectsAnnotate extends SqlExecution::Range, DataFlow::CfgNode {
override CallNode node;
CallNode raw;
@@ -295,10 +305,10 @@ private module Django {
override DataFlow::Node getSql() { result.asCfgNode() = raw.getArg(0) }
}
/**
* A call to the `raw` function on a model.
/**
* A call to the `raw` function on a model.
*
* See
* See
* - https://docs.djangoproject.com/en/3.1/topics/db/sql/#django.db.models.Manager.raw
* - https://docs.djangoproject.com/en/3.1/ref/models/querysets/#raw
*/
@@ -310,8 +320,8 @@ private module Django {
override DataFlow::Node getSql() { result.asCfgNode() = node.getArg(0) }
}
/**
* A call to the `extra` function on a model.
/**
* A call to the `extra` function on a model.
*
* See https://docs.djangoproject.com/en/3.1/ref/models/querysets/#extra
*/