hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add modeling of jmespath

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-06-09 12:13:29 +02:00
parent 5cdd60d0d6
commit fa6abea465
5 changed files with 43 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/test/library-tests/frameworks/jmespath/taint_test.py
View File

@@ -6,11 +6,11 @@ def test_idna():
expression = jmespath.compile("foo.bar")
ensure_tainted(
jmespath.search("foo.bar", data), # $ MISSING: tainted
jmespath.search("foo.bar", data=data), # $ MISSING: tainted
jmespath.search("foo.bar", data), # $ tainted
jmespath.search("foo.bar", data=data), # $ tainted
expression.search(data), # $ MISSING: tainted
expression.search(value=data) # $ MISSING: tainted
expression.search(data), # $ tainted
expression.search(value=data) # $ tainted
)
# since ```jmespath.search("{wat: `foo`}", {})``` works (and outputs a dictionary),