Skip to content

Commit 0604810

Browse files
committed
Python: Add note about incompleteness
I was going to do this in an issue, but it makes sense to have it in the code. We could still add an issue as well.
1 parent c57c798 commit 0604810

File tree

1 file changed

+6
-0
lines changed
  • python/ql/src/experimental/semmle/python/frameworks

1 file changed

+6
-0
lines changed

python/ql/src/experimental/semmle/python/frameworks/Django.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,12 @@ private module Django {
131131
/** Gets a reference to the `django.db.connection.cursor.execute` function. */
132132
DataFlow::Node execute() { result = execute(DataFlow::TypeTracker::end()) }
133133

134+
// -------------------------------------------------------------------------
135+
// django.db.models
136+
// -------------------------------------------------------------------------
137+
// NOTE: The modelling of django models is currently fairly incomplete.
138+
// It does not fully take `Model`s, `Manager`s, `and QuerySet`s into account.
139+
// It simply identifies some common dangerous cases.
134140
/** Gets a reference to the `django.db.models` module. */
135141
private DataFlow::Node models(DataFlow::TypeTracker t) {
136142
t.start() and

0 commit comments

Comments
 (0)