mirror of
https://github.com/github/codeql.git
synced 2026-03-26 01:08:16 +01:00
26 lines
490 B
Plaintext
26 lines
490 B
Plaintext
|
|
import python
|
|
|
|
import semmle.python.security.TaintTracking
|
|
|
|
/* Sources */
|
|
|
|
class AnySource extends TaintSource {
|
|
|
|
AnySource() {
|
|
this instanceof ControlFlowNode
|
|
}
|
|
|
|
override predicate isSourceOf(TaintKind kind) { any() }
|
|
|
|
}
|
|
/* Flow */
|
|
import semmle.python.security.strings.Untrusted
|
|
|
|
from TaintSource src, TaintSink sink
|
|
where src.flowsToSink(sink)
|
|
|
|
select sink.toString(), "This message wouldn't appear if the query were complete $@",
|
|
src.toString(), "nor this"
|
|
|