mirror of
https://github.com/github/codeql.git
synced 2025-12-27 06:06:32 +01:00
cf9ad0cdc5
This was raised as a question at review, and I don't really have a good enough argument for moving it under POI. At the end of the day, they are _security_ related enough I guess :)
8 lines
619 B
Plaintext
8 lines
619 B
Plaintext
edges
|
|
| test.py:13:16:13:27 | ControlFlowNode for Attribute | test.py:15:36:15:39 | ControlFlowNode for data |
|
|
nodes
|
|
| test.py:13:16:13:27 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
|
|
| test.py:15:36:15:39 | ControlFlowNode for data | semmle.label | ControlFlowNode for data |
|
|
#select
|
|
| test.py:15:36:15:39 | ControlFlowNode for data | test.py:13:16:13:27 | ControlFlowNode for Attribute | test.py:15:36:15:39 | ControlFlowNode for data | Call to hmac.new [param 1] with untrusted data from $@. | test.py:13:16:13:27 | ControlFlowNode for Attribute | ControlFlowNode for Attribute |
|