Files
codeql/python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/options
Rasmus Lerchedahl Petersen 114984bd8c Python: Added tests based on security analysis
currently we do not:
- recognize the pattern
   `{'author': {"$eq": author}}` as protected
- recognize arguements to `$where` (and friends)
   as vulnerable
2023-09-07 10:22:37 +02:00

2 lines
54 B
Plaintext

semmle-extractor-options: --max-import-depth=1 -r PoC