mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
Python: Add taint-tests for SQLAlchemy
This commit is contained in:
@@ -0,0 +1,3 @@
|
||||
argumentToEnsureNotTaintedNotMarkedAsSpurious
|
||||
untaintedArgumentToEnsureTaintedNotMarkedAsMissing
|
||||
failures
|
||||
@@ -0,0 +1,2 @@
|
||||
import experimental.meta.InlineTaintTest
|
||||
import experimental.semmle.python.frameworks.SqlAlchemy
|
||||
@@ -0,0 +1,12 @@
|
||||
import sqlalchemy
|
||||
|
||||
def test_taint():
|
||||
ts = TAINTED_STRING
|
||||
|
||||
ensure_tainted(
|
||||
ts, # $ tainted
|
||||
sqlalchemy.text(ts), # $ MISSING: tainted
|
||||
sqlalchemy.sql.text(ts),# $ MISSING: tainted
|
||||
sqlalchemy.sql.expression.text(ts),# $ MISSING: tainted
|
||||
sqlalchemy.sql.expression.TextClause(ts),# $ MISSING: tainted
|
||||
)
|
||||
Reference in New Issue
Block a user