mirror of
https://github.com/github/codeql.git
synced 2025-12-19 18:33:16 +01:00
6b87458c2e
Some of the tests currently fail, since they can't reproduce the old tests results (since the sinks/sources defined in the library code are not HttpResponseTaintSink/HttpRequestTaintSource)
10 lines
264 B
Plaintext
10 lines
264 B
Plaintext
import python
|
|
import semmle.python.security.injection.Sql
|
|
import semmle.python.web.django.Db
|
|
import semmle.python.web.django.Model
|
|
import semmle.python.security.strings.Untrusted
|
|
|
|
from SqlInjectionSink sink, TaintKind kind
|
|
where sink.sinks(kind)
|
|
select sink, kind
|