File tree Expand file tree Collapse file tree 3 files changed +6
-13
lines changed
python/ql/src/experimental Expand file tree Collapse file tree 3 files changed +6
-13
lines changed Original file line number Diff line number Diff line change 12
12
*/
13
13
14
14
import python
15
- import semmle.python.dataflow.new.DataFlow
16
- import semmle.python.dataflow.new.TaintTracking
17
- import semmle.python.ApiGraphs
18
- import semmle.python.dataflow.new.RemoteFlowSources
19
- import semmle.python.dataflow.new.internal.DataFlowPublic
20
15
import experimental.semmle.python.security.DecompressionBomb
21
16
import BombsFlow:: PathGraph
22
17
Original file line number Diff line number Diff line change 1
1
import python
2
- import semmle.python.dataflow.new.DataFlow
3
2
import semmle.python.dataflow.new.TaintTracking
4
3
import semmle.python.ApiGraphs
5
4
import semmle.python.dataflow.new.RemoteFlowSources
@@ -26,7 +25,7 @@ module DecompressionBomb {
26
25
27
26
module ZipFile {
28
27
/**
29
- * A `zipfile` Instance
28
+ * Gets `zipfile` Instance
30
29
*
31
30
* ```python
32
31
* zipfile.ZipFile()
@@ -129,7 +128,7 @@ module TarFile {
129
128
}
130
129
131
130
/**
132
- * A tarfile instance for extracting compressed data
131
+ * Gets tarfile instance for extracting compressed data
133
132
*/
134
133
API:: Node tarfileExtractMember ( ) {
135
134
result =
@@ -374,7 +373,7 @@ module BombsConfig implements DataFlow::ConfigSig {
374
373
predicate isSource ( DataFlow:: Node source ) {
375
374
source instanceof RemoteFlowSource
376
375
or
377
- source instanceof FastAPI
376
+ source instanceof FastApi
378
377
}
379
378
380
379
predicate isSink ( DataFlow:: Node sink ) { sink instanceof DecompressionBomb:: Sink }
Original file line number Diff line number Diff line change 1
1
import python
2
- import semmle.python.dataflow.new.DataFlow
3
2
import semmle.python.dataflow.new.TaintTracking
4
3
import semmle.python.ApiGraphs
5
4
@@ -8,10 +7,10 @@ import semmle.python.ApiGraphs
8
7
*/
9
8
module FileAndFormRemoteFlowSource {
10
9
/**
11
- * A
10
+ * A FastAPI Remote Flow Source for requests with multipart data in the body or requests with single file in the body
12
11
*/
13
- class FastAPI extends DataFlow:: Node {
14
- FastAPI ( ) {
12
+ class FastApi extends DataFlow:: Node {
13
+ FastApi ( ) {
15
14
exists ( API:: Node fastApiParam , Expr fastApiUploadFile |
16
15
fastApiParam =
17
16
API:: moduleImport ( "fastapi" )
You can’t perform that action at this time.
0 commit comments