# Add taintlib to PATH so it can be imported during runtime without any hassle import sys; import os; sys.path.append(os.path.dirname(os.path.dirname((__file__)))) from taintlib import * # This has no runtime impact, but allows autocomplete to work from typing import TYPE_CHECKING if TYPE_CHECKING: from ..taintlib import * # Actual tests def str_methods(): print("\n# str_methods") ts = TAINTED_STRING tb = TAINTED_BYTES ensure_tainted( ts.casefold(), # $ tainted ts.format_map({}), # $ tainted "{unsafe}".format_map({"unsafe": ts}), # $ tainted ) def binary_decode_encode(): print("\n# binary_decode_encode") tb = TAINTED_BYTES import base64 ensure_tainted( # New in Python 3.4 base64.a85encode(tb), # $ tainted base64.a85decode(base64.a85encode(tb)), # $ tainted # New in Python 3.4 base64.b85encode(tb), # $ tainted base64.b85decode(base64.b85encode(tb)), # $ tainted # New in Python 3.1 base64.encodebytes(tb), # $ tainted base64.decodebytes(base64.encodebytes(tb)), # $ tainted ) def f_strings(): print("\n# f_strings") ts = TAINTED_STRING ensure_tainted(f"foo {ts} bar") # $ tainted # Make tests runable str_methods() binary_decode_encode() f_strings()