hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

sanitize resutls exist in test/demo/example/sample directories

Browse Source
This commit is contained in:
amammad
2023-08-14 23:48:03 +10:00
parent 1c3cc1fa29
commit eb5529eac5
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/WebAppConstantSecretKey.ql
View File

@@ -19,6 +19,7 @@ import semmle.python.ApiGraphs
import semmle.python.dataflow.new.TaintTracking
import WebAppConstantSecretKeyDjango
import WebAppConstantSecretKeyFlask
import semmle.python.filters.Tests
newtype TFrameWork =
Flask() or
@@ -33,7 +34,13 @@ module WebAppConstantSecretKeyConfig implements DataFlow::StateConfigSig {
state = Django() and DjangoConstantSecretKeyConfig::isSource(source)
}
predicate isBarrier(DataFlow::Node node) { node.getLocation().getFile().inStdlib() }
predicate isBarrier(DataFlow::Node node) {
node.getLocation().getFile().inStdlib() or
node.getLocation()
.getFile()
.getAbsolutePath()
.matches(["%test%", "%demo%", "%example%", "%sample%"])
}
predicate isSink(DataFlow::Node sink, FlowState state) {
state = Flask() and FlaskConstantSecretKeyConfig::isSink(sink)