Files
codeql/python/ql/test/query-tests/Security/CWE-502/test.py
2019-01-16 14:53:42 +01:00

19 lines
300 B
Python

import flask
import pickle
import yaml
import marshal
from flask import Flask, request
app = Flask(__name__)
@app.route("/")
def hello():
payload = request.args.get('payload')
pickle.loads(payload)
yaml.load(payload)
marshal.loads(payload)
import dill
dill.loads(payload)