hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Make any routed parameter a RemoteFlowSource

Browse Source 
I'm not 100% sure whether this approach makes everything too magic, but I like
the fact that you can't _forget_ to make routed params remove-flow sources.
This commit is contained in:
Rasmus Wriedt Larsen
2020-10-06 02:49:49 +02:00
parent b78c665f34
commit f03a8a838b
3 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/test/experimental/library-tests/frameworks/flask/TestTaint.expected
View File

@@ -1,5 +1,5 @@
| taint_test.py:6 | fail | test_taint | name |
| taint_test.py:6 | fail | test_taint | number |
| taint_test.py:6 | ok | test_taint | name |
| taint_test.py:6 | ok | test_taint | number |
| taint_test.py:7 | ok | test_taint | foo |
| taint_test.py:14 | ok | test_taint | request.environ |
| taint_test.py:15 | ok | test_taint | request.environ.get(..) |