File tree Expand file tree Collapse file tree 1 file changed +3
-5
lines changed
python/ql/lib/semmle/python/frameworks Expand file tree Collapse file tree 1 file changed +3
-5
lines changed Original file line number Diff line number Diff line change @@ -521,7 +521,7 @@ module Flask {
521
521
}
522
522
523
523
/**
524
- * A `send_from_directory` call considered a sink for file system access vulnerabilities .
524
+ * A call to `flask.send_from_directory` .
525
525
*
526
526
* See https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_from_directory
527
527
*/
@@ -536,14 +536,12 @@ module Flask {
536
536
}
537
537
538
538
/**
539
- * A `send_file` call considered a sink for file system access vulnerabilities .
539
+ * A call to `flask.send_file` .
540
540
*
541
541
* See https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_file
542
542
*/
543
543
class FlaskSendFile extends FileSystemAccess:: Range , DataFlow:: CallCfgNode {
544
- FlaskSendFile ( ) {
545
- this = API:: moduleImport ( "flask" ) .getMember ( "send_file" ) .getACall ( )
546
- }
544
+ FlaskSendFile ( ) { this = API:: moduleImport ( "flask" ) .getMember ( "send_file" ) .getACall ( ) }
547
545
548
546
override DataFlow:: Node getAPathArgument ( ) {
549
547
result in [ this .getArg ( 0 ) , this .getArgByName ( "filename_or_fp" ) ]
You can’t perform that action at this time.
0 commit comments