mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
6b87458c2e
Some of the tests currently fail, since they can't reproduce the old tests results (since the sinks/sources defined in the library code are not HttpResponseTaintSink/HttpRequestTaintSource)
8 lines
229 B
Plaintext
8 lines
229 B
Plaintext
import python
|
|
import semmle.python.web.HttpRequest
|
|
import semmle.python.security.strings.Untrusted
|
|
|
|
from HttpRequestTaintSource source, TaintKind kind
|
|
where source.isSourceOf(kind)
|
|
select source.(ControlFlowNode).getNode(), kind
|