#select
| flask_tests.py:13:17:13:26 | rfs_header | flask_tests.py:1:29:1:35 | ImportMember | flask_tests.py:13:17:13:26 | rfs_header | This HTTP header is constructed from a $@. | flask_tests.py:1:29:1:35 | ImportMember | user-provided value |
| flask_tests.py:20:36:20:61 | Subscript | flask_tests.py:1:29:1:35 | ImportMember | flask_tests.py:20:36:20:61 | Subscript | This HTTP header is constructed from a $@. | flask_tests.py:1:29:1:35 | ImportMember | user-provided value |
| flask_tests.py:33:11:33:20 | rfs_header | flask_tests.py:1:29:1:35 | ImportMember | flask_tests.py:33:11:33:20 | rfs_header | This HTTP header is constructed from a $@. | flask_tests.py:1:29:1:35 | ImportMember | user-provided value |
| flask_tests.py:35:12:35:21 | rfs_header | flask_tests.py:1:29:1:35 | ImportMember | flask_tests.py:35:12:35:21 | rfs_header | This HTTP header is constructed from a $@. | flask_tests.py:1:29:1:35 | ImportMember | user-provided value |
| http_test.py:12:40:12:50 | input_value | http_test.py:5:16:5:19 | self | http_test.py:12:40:12:50 | input_value | This HTTP header is constructed from a $@. | http_test.py:5:16:5:19 | self | user-provided value |
| wsgiref_tests.py:8:17:8:22 | h_name | wsgiref_tests.py:4:14:4:20 | environ | wsgiref_tests.py:8:17:8:22 | h_name | This HTTP header is constructed from a $@. | wsgiref_tests.py:4:14:4:20 | environ | user-provided value |
| wsgiref_tests.py:8:42:8:46 | h_val | wsgiref_tests.py:4:14:4:20 | environ | wsgiref_tests.py:8:42:8:46 | h_val | This HTTP header is constructed from a $@. | wsgiref_tests.py:4:14:4:20 | environ | user-provided value |
edges
| flask_tests.py:1:29:1:35 | ImportMember | flask_tests.py:1:29:1:35 | request | provenance |  |
| flask_tests.py:1:29:1:35 | request | flask_tests.py:9:18:9:24 | request | provenance |  |
| flask_tests.py:1:29:1:35 | request | flask_tests.py:19:18:19:24 | request | provenance |  |
| flask_tests.py:1:29:1:35 | request | flask_tests.py:20:36:20:42 | request | provenance |  |
| flask_tests.py:1:29:1:35 | request | flask_tests.py:31:18:31:24 | request | provenance |  |
| flask_tests.py:9:5:9:14 | rfs_header | flask_tests.py:13:17:13:26 | rfs_header | provenance |  |
| flask_tests.py:9:18:9:24 | request | flask_tests.py:9:5:9:14 | rfs_header | provenance | AdditionalTaintStep |
| flask_tests.py:19:18:19:24 | request | flask_tests.py:20:36:20:61 | Subscript | provenance | AdditionalTaintStep |
| flask_tests.py:20:36:20:42 | request | flask_tests.py:20:36:20:61 | Subscript | provenance | AdditionalTaintStep |
| flask_tests.py:31:5:31:14 | rfs_header | flask_tests.py:33:11:33:20 | rfs_header | provenance |  |
| flask_tests.py:31:5:31:14 | rfs_header | flask_tests.py:35:12:35:21 | rfs_header | provenance |  |
| flask_tests.py:31:18:31:24 | request | flask_tests.py:31:5:31:14 | rfs_header | provenance | AdditionalTaintStep |
| http_test.py:5:16:5:19 | self | http_test.py:6:45:6:53 | Attribute | provenance | AdditionalTaintStep |
| http_test.py:6:9:6:19 | parsed_path | http_test.py:7:40:7:56 | Attribute | provenance | AdditionalTaintStep |
| http_test.py:6:23:6:54 | Attribute() | http_test.py:6:9:6:19 | parsed_path | provenance |  |
| http_test.py:6:45:6:53 | Attribute | http_test.py:6:23:6:54 | Attribute() | provenance | MaD:2 |
| http_test.py:7:9:7:14 | params | http_test.py:8:23:8:28 | params | provenance |  |
| http_test.py:7:18:7:57 | Attribute() | http_test.py:7:9:7:14 | params | provenance |  |
| http_test.py:7:40:7:56 | Attribute | http_test.py:7:18:7:57 | Attribute() | provenance | MaD:1 |
| http_test.py:8:9:8:19 | input_value | http_test.py:12:40:12:50 | input_value | provenance |  |
| http_test.py:8:23:8:28 | params | http_test.py:8:23:8:47 | Attribute() | provenance | dict.get |
| http_test.py:8:23:8:47 | Attribute() | http_test.py:8:9:8:19 | input_value | provenance |  |
| wsgiref_tests.py:4:14:4:20 | environ | wsgiref_tests.py:6:5:6:10 | h_name | provenance |  |
| wsgiref_tests.py:4:14:4:20 | environ | wsgiref_tests.py:7:5:7:9 | h_val | provenance |  |
| wsgiref_tests.py:6:5:6:10 | h_name | wsgiref_tests.py:8:17:8:22 | h_name | provenance |  |
| wsgiref_tests.py:7:5:7:9 | h_val | wsgiref_tests.py:8:42:8:46 | h_val | provenance |  |
models
| 1 | Summary: urllib; Member[parse].Member[parse_qs]; Argument[0,qs:]; ReturnValue; taint |
| 2 | Summary: urllib; Member[parse].Member[urlparse]; Argument[0,urlstring:]; ReturnValue; taint |
nodes
| flask_tests.py:1:29:1:35 | ImportMember | semmle.label | ImportMember |
| flask_tests.py:1:29:1:35 | request | semmle.label | request |
| flask_tests.py:9:5:9:14 | rfs_header | semmle.label | rfs_header |
| flask_tests.py:9:18:9:24 | request | semmle.label | request |
| flask_tests.py:13:17:13:26 | rfs_header | semmle.label | rfs_header |
| flask_tests.py:19:18:19:24 | request | semmle.label | request |
| flask_tests.py:20:36:20:42 | request | semmle.label | request |
| flask_tests.py:20:36:20:61 | Subscript | semmle.label | Subscript |
| flask_tests.py:31:5:31:14 | rfs_header | semmle.label | rfs_header |
| flask_tests.py:31:18:31:24 | request | semmle.label | request |
| flask_tests.py:33:11:33:20 | rfs_header | semmle.label | rfs_header |
| flask_tests.py:35:12:35:21 | rfs_header | semmle.label | rfs_header |
| http_test.py:5:16:5:19 | self | semmle.label | self |
| http_test.py:6:9:6:19 | parsed_path | semmle.label | parsed_path |
| http_test.py:6:23:6:54 | Attribute() | semmle.label | Attribute() |
| http_test.py:6:45:6:53 | Attribute | semmle.label | Attribute |
| http_test.py:7:9:7:14 | params | semmle.label | params |
| http_test.py:7:18:7:57 | Attribute() | semmle.label | Attribute() |
| http_test.py:7:40:7:56 | Attribute | semmle.label | Attribute |
| http_test.py:8:9:8:19 | input_value | semmle.label | input_value |
| http_test.py:8:23:8:28 | params | semmle.label | params |
| http_test.py:8:23:8:47 | Attribute() | semmle.label | Attribute() |
| http_test.py:12:40:12:50 | input_value | semmle.label | input_value |
| wsgiref_tests.py:4:14:4:20 | environ | semmle.label | environ |
| wsgiref_tests.py:6:5:6:10 | h_name | semmle.label | h_name |
| wsgiref_tests.py:7:5:7:9 | h_val | semmle.label | h_val |
| wsgiref_tests.py:8:17:8:22 | h_name | semmle.label | h_name |
| wsgiref_tests.py:8:42:8:46 | h_val | semmle.label | h_val |
subpaths