mirror of
https://github.com/github/codeql.git
synced 2025-12-18 09:43:15 +01:00
28 lines
816 B
Python
28 lines
816 B
Python
from django.db import models
|
|
import django.db.models.fields.files
|
|
|
|
def custom_path_function_1(instance, filename):
|
|
ensure_tainted(filename) # $ tainted
|
|
|
|
def custom_path_function_2(instance, filename):
|
|
ensure_tainted(filename) # $ tainted
|
|
|
|
def custom_path_function_3(instance, filename):
|
|
ensure_tainted(filename) # $ tainted
|
|
|
|
def custom_path_function_4(instance, filename):
|
|
ensure_tainted(filename) # $ tainted
|
|
|
|
|
|
class CustomFileFieldSubclass(models.FileField):
|
|
pass
|
|
|
|
|
|
class MyModel(models.Model):
|
|
upload_1 = models.FileField(None, None, custom_path_function_1)
|
|
upload_2 = django.db.models.fields.files.FileField(upload_to=custom_path_function_2)
|
|
|
|
upload_3 = models.ImageField(upload_to=custom_path_function_3)
|
|
|
|
upload_4 = CustomFileFieldSubclass(upload_to=custom_path_function_4)
|