mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
After further research, it was discovered that Flask-Mongoengine has multiple ways of allowing a developer to call the Document class. One way is by directly importing the Document class from the module. Another approach is to get the Document class via a mongoengine instance. The update to this query checks for cases where the developer gets the Document class via the MongoEngine instance. Other misc changes include setting the various predicates to private.