mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
23 lines
594 B
Python
23 lines
594 B
Python
from flask import Flask, request # $ Source=flask
|
|
app = Flask(__name__)
|
|
|
|
@app.route("/code-execution")
|
|
def code_execution():
|
|
code = request.args.get("code")
|
|
exec(code) # $ Alert=flask
|
|
eval(code) # $ Alert=flask
|
|
cmd = compile(code, "<filename>", "exec")
|
|
exec(cmd) # $ Alert=flask
|
|
|
|
|
|
@app.route("/safe-code-execution")
|
|
def code_execution():
|
|
foo = 42
|
|
bar = 43
|
|
|
|
obj_name = request.args.get("obj")
|
|
if obj_name == "foo" or obj_name == "bar":
|
|
# TODO: Should not alert on this
|
|
obj = eval(obj_name) # $ SPURIOUS: Alert=flask
|
|
print(obj, obj*10)
|