File tree Expand file tree Collapse file tree 1 file changed +14
-3
lines changed
python/ql/src/experimental/semmle/python/frameworks Expand file tree Collapse file tree 1 file changed +14
-3
lines changed Original file line number Diff line number Diff line change @@ -8,16 +8,27 @@ private import semmle.python.frameworks.Django
8
8
private import semmle.python.dataflow.new.DataFlow
9
9
private import experimental.semmle.python.Concepts
10
10
private import semmle.python.ApiGraphs
11
+ import semmle.python.dataflow.new.RemoteFlowSources
11
12
12
13
private module PrivateDjango {
13
- API:: Node django ( ) { result = API:: moduleImport ( "django" ) }
14
-
15
14
private module django {
16
- API:: Node http ( ) { result = django ( ) .getMember ( "http" ) }
15
+ API:: Node http ( ) { result = API :: moduleImport ( "django" ) .getMember ( "http" ) }
17
16
18
17
module http {
19
18
API:: Node response ( ) { result = http ( ) .getMember ( "response" ) }
20
19
20
+ API:: Node request ( ) { result = http ( ) .getMember ( "request" ) }
21
+
22
+ module request {
23
+ module HttpRequest {
24
+ class DjangoGETParameter extends DataFlow:: Node , RemoteFlowSource:: Range {
25
+ DjangoGETParameter ( ) { this = request ( ) .getMember ( "GET" ) .getMember ( "get" ) .getACall ( ) }
26
+
27
+ override string getSourceType ( ) { result = "django.http.request.GET.get" }
28
+ }
29
+ }
30
+ }
31
+
21
32
module response {
22
33
module HttpResponse {
23
34
API:: Node baseClassRef ( ) {
You can’t perform that action at this time.
0 commit comments