Files
codeql/python/ql/test/query-tests
Rasmus Wriedt Larsen 26319bfc04 Python: Fix Flask jsonify XSS regression
The reason the result was found before, is that `jsonify(data)` was
modeled as TWO separate subclasses of `Http::Server::HttpResponse`, one
because of the implicit construction in return
(FlaskRouteHandlerReturn), and one from the `jsonify` call
(FlaskJsonifyCall). Due to the QL evaluation, we got a combination from
the two, meaning mime-type from FlaskRouteHandlerReturn and body from
FlaskJsonifyCall...
2023-08-29 11:11:32 +02:00
..
2022-12-19 15:15:32 +00:00
2022-08-22 21:41:47 +02:00
2023-03-20 14:13:48 +01:00