We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
SimpleXmlRpcServer.ql
1 parent 4abab22 commit d2b03bbCopy full SHA for d2b03bb
python/ql/src/experimental/Security/CWE-611/SimpleXmlRpcServer.ql
@@ -10,14 +10,14 @@
10
*/
11
12
private import python
13
-private import experimental.semmle.python.Concepts
+private import semmle.python.Concepts
14
private import semmle.python.ApiGraphs
15
16
from DataFlow::CallCfgNode call, string kinds
17
where
18
call = API::moduleImport("xmlrpc").getMember("server").getMember("SimpleXMLRPCServer").getACall() and
19
kinds =
20
- strictconcat(ExperimentalXML::XMLParsingVulnerabilityKind kind |
+ strictconcat(XML::XMLParsingVulnerabilityKind kind |
21
kind.isBillionLaughs() or kind.isQuadraticBlowup()
22
|
23
kind, ", "
0 commit comments