mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
7d5e35a7aa
which is what flask calls them. wildcard rules in bottle, django doesn't even give them a proper term :(
68 lines
1.7 KiB
Python
68 lines
1.7 KiB
Python
import flask
|
|
|
|
from flask import Flask, request, make_response
|
|
app = Flask(__name__)
|
|
|
|
@app.route("/")
|
|
def hello_world():
|
|
return "Hello World!"
|
|
|
|
from flask.views import MethodView
|
|
|
|
class MyView(MethodView):
|
|
|
|
def get(self, user_id):
|
|
if user_id is None:
|
|
# return a list of users
|
|
pass
|
|
else:
|
|
# expose a single user
|
|
pass
|
|
|
|
the_view = MyView.as_view('my_view')
|
|
|
|
app.add_url_rule('/the/', defaults={'user_id': None},
|
|
view_func=the_view, methods=['GET',])
|
|
|
|
@app.route("/dangerous")
|
|
def dangerous():
|
|
return request.args.get('payload')
|
|
|
|
@app.route("/dangerous-with-cfg-split")
|
|
def dangerous2():
|
|
x = request.form['param0']
|
|
if request.method == "POST":
|
|
return request.form['param1']
|
|
return None
|
|
|
|
@app.route('/unsafe')
|
|
def unsafe():
|
|
first_name = request.args.get('name', '')
|
|
return make_response("Your name is " + first_name)
|
|
|
|
@app.route('/safe')
|
|
def safe():
|
|
first_name = request.args.get('name', '')
|
|
return make_response("Your name is " + escape(first_name))
|
|
|
|
@app.route('/hello/<name>')
|
|
def hello(name):
|
|
return make_response("Your name is " + name)
|
|
|
|
@app.route('/foo/<path:subpath>')
|
|
def foo(subpath):
|
|
return make_response("The subpath is " + subpath)
|
|
|
|
@app.route('/multiple/') # TODO: not recognized as route
|
|
@app.route('/multiple/foo/<foo>') # TODO: not recognized as route
|
|
@app.route('/multiple/bar/<bar>')
|
|
def multiple(foo=None, bar=None):
|
|
return make_response("foo={!r} bar={!r}".format(foo, bar))
|
|
|
|
@app.route('/complex/<string(length=2):lang_code>')
|
|
def complex(lang_code):
|
|
return make_response("lang_code {}".format(lang_code))
|
|
|
|
if __name__ == "__main__":
|
|
app.run(debug=True)
|