hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Implement sinks for wsgiref + allow lists in bulk header updates + local flow

Browse Source
This commit is contained in:
Joe Farebrother
2024-04-08 17:46:44 +01:00
parent 9d56f3eb68
commit eeef062f7c
3 changed files with 142 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/lib/semmle/python/Concepts.qll
View File

@@ -1085,7 +1085,7 @@ module Http {
}
/**
* A data-flow node that sets multiple headers in an HTTP response using a dict.
* A data-flow node that sets multiple headers in an HTTP response using a dict or a list of tuples.
*
* Extend this class to model new APIs. If you want to refine existing API models,
* extend `ResponseHeaderBulkWrite::Range` instead.