Python: Add taint-tests for SQLAlchemy

This commit is contained in:
Rasmus Wriedt Larsen
2021-06-29 11:03:40 +02:00
parent cb112395f8
commit ef48734206
3 changed files with 17 additions and 0 deletions

View File

@@ -0,0 +1,3 @@
argumentToEnsureNotTaintedNotMarkedAsSpurious
untaintedArgumentToEnsureTaintedNotMarkedAsMissing
failures

View File

@@ -0,0 +1,2 @@
import experimental.meta.InlineTaintTest
import experimental.semmle.python.frameworks.SqlAlchemy

View File

@@ -0,0 +1,12 @@
import sqlalchemy
def test_taint():
ts = TAINTED_STRING
ensure_tainted(
ts, # $ tainted
sqlalchemy.text(ts), # $ MISSING: tainted
sqlalchemy.sql.text(ts),# $ MISSING: tainted
sqlalchemy.sql.expression.text(ts),# $ MISSING: tainted
sqlalchemy.sql.expression.TextClause(ts),# $ MISSING: tainted
)