mirror of
https://github.com/github/codeql.git
synced 2026-06-17 19:01:09 +02:00
19 lines
400 B
Python
19 lines
400 B
Python
from lxml import etree
|
|
from io import StringIO
|
|
|
|
from django.urls import path
|
|
from django.http import HttpResponse
|
|
from django.template import Template, Context, Engine, engines
|
|
|
|
|
|
def a(request): # $ Source
|
|
value = request.GET['xpath']
|
|
f = StringIO('<foo><bar></bar></foo>')
|
|
tree = etree.parse(f)
|
|
r = tree.xpath("/tag[@id='%s']" % value) # $ Alert
|
|
|
|
|
|
urlpatterns = [
|
|
path('a', a)
|
|
]
|