Python: Ignore relatively safe arguments of extra

yoff · yoff · commit 2c855c739bdc · 2020-10-21T13:15:46.000+02:00
diff --git a/python/ql/src/experimental/semmle/python/frameworks/Django.qll b/python/ql/src/experimental/semmle/python/frameworks/Django.qll
@@ -341,8 +341,7 @@ private module Django {
 
     override DataFlow::Node getSql() {
       result.asCfgNode() =
-        [node.getArg([0 .. 5]),
-            node.getArgByName(["select", "where", "params", "tables", "order_by", "select_params"])]
+        [node.getArg([0 .. 5]), node.getArgByName(["select", "where", "tables", "order_by"])]
     }
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -341,8 +341,7 @@ private module Django {`
`341`	`341`
`342`	`342`	`override DataFlow::Node getSql() {`
`343`	`343`	`result.asCfgNode() =`
`344`		`- [node.getArg([0 .. 5]),`
`345`		`- node.getArgByName(["select", "where", "params", "tables", "order_by", "select_params"])]`
	`344`	`+ [node.getArg([0 .. 5]), node.getArgByName(["select", "where", "tables", "order_by"])]`
`346`	`345`	`}`
`347`	`346`	`}`
`348`	`347`	`}`