Files
codeql/python/ql/test/experimental/library-tests/frameworks/stdlib/Decoding.py
Rasmus Lerchedahl Petersen 172e058438 Python: unsafe -> mayExecuteInput
2020-10-15 12:56:29 +02:00

6 lines
264 B
Python

import pickle
import marshal
pickle.loads(payload) # $decodeInput=payload $decodeOutput=Attribute() $decodeFormat=pickle $decodeMayExecuteInput
marshal.loads(payload) # $decodeInput=payload $decodeOutput=Attribute() $decodeFormat=marshal $decodeMayExecuteInput