File tree Expand file tree Collapse file tree 3 files changed +7
-8
lines changed
src/semmle/python/web/cherrypy
test/library-tests/web/cherrypy Expand file tree Collapse file tree 3 files changed +7
-8
lines changed Original file line number Diff line number Diff line change @@ -3,18 +3,18 @@ import semmle.python.web.Http
33
44module CherryPy {
55
6- FunctionObject expose ( ) {
7- result = ModuleObject :: named ( "cherrypy" ) . attr ( " expose")
6+ FunctionValue expose ( ) {
7+ result = Value :: named ( "cherrypy. expose" )
88 }
99
1010}
1111
1212class CherryPyExposedFunction extends Function {
1313
1414 CherryPyExposedFunction ( ) {
15- this .getADecorator ( ) .refersTo ( CherryPy:: expose ( ) )
15+ this .getADecorator ( ) .pointsTo ( CherryPy:: expose ( ) )
1616 or
17- this .getADecorator ( ) .( Call ) .getFunc ( ) .refersTo ( CherryPy:: expose ( ) )
17+ this .getADecorator ( ) .( Call ) .getFunc ( ) .pointsTo ( CherryPy:: expose ( ) )
1818 }
1919
2020}
@@ -23,10 +23,10 @@ class CherryPyRoute extends CallNode {
2323
2424 CherryPyRoute ( ) {
2525 /* cherrypy.quickstart(root, script_name, config) */
26- ModuleObject :: named ( "cherrypy" ) . attr ( " quickstart") .( FunctionObject ) .getACall ( ) = this
26+ Value :: named ( "cherrypy. quickstart" ) .( FunctionValue ) .getACall ( ) = this
2727 or
2828 /* cherrypy.tree.mount(root, script_name, config) */
29- this .getFunction ( ) .( AttrNode ) .getObject ( "mount" ) .refersTo ( ModuleObject :: named ( "cherrypy" ) . attr ( " tree") )
29+ this .getFunction ( ) .( AttrNode ) .getObject ( "mount" ) .pointsTo ( Value :: named ( "cherrypy. tree" ) )
3030 }
3131
3232 ClassObject getAppClass ( ) {
Original file line number Diff line number Diff line change @@ -54,7 +54,7 @@ class CherryPyExposedFunctionParameter extends TaintSource {
5454class CherryPyRequestSource extends TaintSource {
5555
5656 CherryPyRequestSource ( ) {
57- this .( ControlFlowNode ) .refersTo ( ModuleObject :: named ( "cherrypy" ) . attr ( " request") )
57+ this .( ControlFlowNode ) .pointsTo ( Value :: named ( "cherrypy. request" ) )
5858 }
5959
6060 override predicate isSourceOf ( TaintKind kind ) {
Original file line number Diff line number Diff line change 11| ../../../query-tests/Security/lib/cherrypy/__init__.py:10 | _ThreadLocalProxy() | cherrypy.request |
2- | ../../../query-tests/Security/lib/cherrypy/__init__.py:10 | request | cherrypy.request |
32| test.py:10 | arg | externally controlled string |
43| test.py:16 | arg | externally controlled string |
You can’t perform that action at this time.
0 commit comments