hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: ORM: Handle <Model>.objects.create and friends

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2022-02-17 13:45:29 +01:00
parent 9b458b54aa
commit fea46b642d
2 changed files with 33 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/test/library-tests/frameworks/django-orm/testapp/orm_tests.py
View File

@@ -113,11 +113,11 @@ class TestSave5(models.Model):
def test_save5_store():
# note: positional args not possible
obj = TestSave5.objects.create(text=SOURCE)
SINK(obj.text) # $ MISSING: flow
SINK(obj.text) # $ flow="SOURCE, l:-1 -> obj.text"
def test_save5_load():
obj = TestSave5.objects.first()
SINK(obj.text) # $ MISSING: flow
SINK(obj.text) # $ flow="SOURCE, l:-5 -> obj.text"
# --------------------------------------
# <Model>.objects.get_or_create()
@@ -135,7 +135,7 @@ def test_save6_store():
def test_save6_load():
obj = TestSave6.objects.first()
SINK(obj.text) # $ MISSING: flow
SINK(obj.email) # $ MISSING: flow
SINK(obj.email) # $ flow="SOURCE, l:-7 -> obj.email"
# --------------------------------------
# <Model>.objects.update_or_create()
@@ -153,7 +153,7 @@ def test_save7_store():
def test_save7_load():
obj = TestSave7.objects.first()
SINK(obj.text) # $ MISSING: flow
SINK(obj.email) # $ MISSING: flow
SINK(obj.email) # $ flow="SOURCE, l:-7 -> obj.email"
# --------------------------------------
# <Model>.objects.[<QuerySet>].update()