Skip to content

Commit 14c50e9

Browse files
committed
Add django GET.get RFS
1 parent 45146bc commit 14c50e9

File tree

1 file changed

+14
-3
lines changed
  • python/ql/src/experimental/semmle/python/frameworks

1 file changed

+14
-3
lines changed

python/ql/src/experimental/semmle/python/frameworks/Django.qll

Lines changed: 14 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,16 +8,27 @@ private import semmle.python.frameworks.Django
88
private import semmle.python.dataflow.new.DataFlow
99
private import experimental.semmle.python.Concepts
1010
private import semmle.python.ApiGraphs
11+
import semmle.python.dataflow.new.RemoteFlowSources
1112

1213
private module PrivateDjango {
13-
API::Node django() { result = API::moduleImport("django") }
14-
1514
private module django {
16-
API::Node http() { result = django().getMember("http") }
15+
API::Node http() { result = API::moduleImport("django").getMember("http") }
1716

1817
module http {
1918
API::Node response() { result = http().getMember("response") }
2019

20+
API::Node request() { result = http().getMember("request") }
21+
22+
module request {
23+
module HttpRequest {
24+
class DjangoGETParameter extends DataFlow::Node, RemoteFlowSource::Range {
25+
DjangoGETParameter() { this = request().getMember("GET").getMember("get").getACall() }
26+
27+
override string getSourceType() { result = "django.http.request.GET.get" }
28+
}
29+
}
30+
}
31+
2132
module response {
2233
module HttpResponse {
2334
API::Node baseClassRef() {

0 commit comments

Comments
 (0)