Files
codeql/python/ql/test/query-tests/Security/CWE-209/test.py
2018-11-19 15:15:54 +00:00

26 lines
459 B
Python

from flask import Flask
app = Flask(__name__)
import traceback
def do_computation():
raise Exception("Secret info")
# BAD
@app.route('/bad')
def server_bad():
try:
do_computation()
except Exception as e:
return traceback.format_exc()
# GOOD
@app.route('/good')
def server_good():
try:
do_computation()
except Exception as e:
log(traceback.format_exc())
return "An internal error has occurred!"