Skip to content

Commit 51a6140

Browse files
mrthankyouRasmusWL
andauthored
Change variable name to correct sanitized input variable
Co-authored-by: Rasmus Wriedt Larsen <[email protected]>
1 parent e02a63a commit 51a6140

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

python/ql/test/experimental/query-tests/Security/CWE-943/mongoengine_good.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ def connect_find():
2121
safe_search = sanitize(json_search)
2222

2323
db = me.connect('mydb')
24-
return db.movie.find({'name': json_search})
24+
return db.movie.find({'name': safe_search})
2525

2626
# if __name__ == "__main__":
2727
# app.run(debug=True)

0 commit comments

Comments
 (0)