hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add global variable nested field jump steps

Browse Source
This commit is contained in:
Napalys Klicius
2025-08-04 15:06:53 +02:00
parent 9d4b168977
commit e60d0c88f1
4 changed files with 64 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/test/query-tests/Security/CWE-022-PathInjection/fastapi_path_injection.py
View File

@@ -45,5 +45,5 @@ async def read_item(path: str, data_source=Depends(get_data_source)): # $ MISSIN
return data_source.get_data(path)
@app.get("/file5/", dependencies=[Depends(init_file_handler)])
async def read_item(path: str): # $ MISSING: Source
async def read_item(path: str): # $ Source
return app.state.file_handler2.get_data(path)