Add django FileRsponse as a wrapper

joefarebrother · joefarebrother · commit 2c74ddb85397 · 2025-03-20T11:35:29.000Z
diff --git a/python/ql/src/Resources/FileNotAlwaysClosedQuery.qll b/python/ql/src/Resources/FileNotAlwaysClosedQuery.qll
@@ -36,6 +36,9 @@ class FileWrapperCall extends DataFlow::CallCfgNode {
     or
     wrapped = this.getArg(0) and
     this = API::moduleImport("os").getMember("fdopen").getACall()
+    or
+    wrapped = this.getArg(0) and
+    this = API::moduleImport("django").getMember("http").getMember("FileResponse").getACall()
   }
 
   /** Gets the file that this call wraps. */

Original file line number	Diff line number	Diff line change
`@@ -36,6 +36,9 @@ class FileWrapperCall extends DataFlow::CallCfgNode {`
`36`	`36`	`or`
`37`	`37`	`wrapped = this.getArg(0) and`
`38`	`38`	`this = API::moduleImport("os").getMember("fdopen").getACall()`
	`39`	`+ or`
	`40`	`+ wrapped = this.getArg(0) and`
	`41`	`+ this = API::moduleImport("django").getMember("http").getMember("FileResponse").getACall()`
`39`	`42`	`}`
`40`	`43`
`41`	`44`	`/** Gets the file that this call wraps. */`