File tree Expand file tree Collapse file tree 1 file changed +14
-3
lines changed
python/ql/src/experimental/semmle/python/frameworks Expand file tree Collapse file tree 1 file changed +14
-3
lines changed Original file line number Diff line number Diff line change @@ -8,16 +8,27 @@ private import semmle.python.frameworks.Django
88private import semmle.python.dataflow.new.DataFlow
99private import experimental.semmle.python.Concepts
1010private import semmle.python.ApiGraphs
11+ import semmle.python.dataflow.new.RemoteFlowSources
1112
1213private module PrivateDjango {
13- API:: Node django ( ) { result = API:: moduleImport ( "django" ) }
14-
1514 private module django {
16- API:: Node http ( ) { result = django ( ) .getMember ( "http" ) }
15+ API:: Node http ( ) { result = API :: moduleImport ( "django" ) .getMember ( "http" ) }
1716
1817 module http {
1918 API:: Node response ( ) { result = http ( ) .getMember ( "response" ) }
2019
20+ API:: Node request ( ) { result = http ( ) .getMember ( "request" ) }
21+
22+ module request {
23+ module HttpRequest {
24+ class DjangoGETParameter extends DataFlow:: Node , RemoteFlowSource:: Range {
25+ DjangoGETParameter ( ) { this = request ( ) .getMember ( "GET" ) .getMember ( "get" ) .getACall ( ) }
26+
27+ override string getSourceType ( ) { result = "django.http.request.GET.get" }
28+ }
29+ }
30+ }
31+
2132 module response {
2233 module HttpResponse {
2334 API:: Node baseClassRef ( ) {
You can’t perform that action at this time.
0 commit comments