mirror of
https://github.com/github/codeql.git
synced 2026-07-05 11:35:30 +02:00
41 lines
916 B
Python
41 lines
916 B
Python
from flask import request, Flask # $ Source
|
|
import re
|
|
|
|
app = Flask(__name__)
|
|
|
|
|
|
@app.route("/direct")
|
|
def direct():
|
|
"""
|
|
A RemoteFlowSource is used directly as re.search's pattern
|
|
"""
|
|
|
|
unsafe_pattern = request.args["pattern"]
|
|
re.search(unsafe_pattern, "") # $ Alert
|
|
|
|
|
|
@app.route("/compile")
|
|
def compile():
|
|
"""
|
|
A RemoteFlowSource is used directly as re.compile's pattern
|
|
which also executes .search()
|
|
"""
|
|
|
|
unsafe_pattern = request.args["pattern"]
|
|
compiled_pattern = re.compile(unsafe_pattern) # $ Alert
|
|
compiled_pattern.search("")
|
|
|
|
|
|
@app.route("/compile_direct")
|
|
def compile_direct():
|
|
"""
|
|
A RemoteFlowSource is used directly as re.compile's pattern
|
|
which also executes .search() in the same line
|
|
"""
|
|
|
|
unsafe_pattern = request.args["pattern"]
|
|
re.compile(unsafe_pattern).search("") # $ Alert
|
|
|
|
# if __name__ == "__main__":
|
|
# app.run(debug=True)
|