File tree Expand file tree Collapse file tree 5 files changed +9
-9
lines changed
python/ql/src/experimental/semmle/python Expand file tree Collapse file tree 5 files changed +9
-9
lines changed Original file line number Diff line number Diff line change @@ -159,7 +159,7 @@ module HeaderDeclaration {
159
159
/**
160
160
* Gets the argument containing the header value.
161
161
*/
162
- abstract DataFlow:: Node getHeaderInput ( ) ;
162
+ abstract DataFlow:: Node getAnInput ( ) ;
163
163
}
164
164
}
165
165
@@ -177,5 +177,5 @@ class HeaderDeclaration extends DataFlow::Node {
177
177
/**
178
178
* Gets the argument containing the header value.
179
179
*/
180
- DataFlow:: Node getHeaderInput ( ) { result = range .getHeaderInput ( ) }
180
+ DataFlow:: Node getAnInput ( ) { result = range .getAnInput ( ) }
181
181
}
Original file line number Diff line number Diff line change @@ -56,7 +56,7 @@ private module PrivateDjango {
56
56
class DjangoResponseSetItemCall extends DataFlow:: CallCfgNode , HeaderDeclaration:: Range {
57
57
DjangoResponseSetItemCall ( ) { this .getFunction ( ) = headerSetItemCall ( ) }
58
58
59
- override DataFlow:: Node getHeaderInput ( ) { result = this .getArg ( [ 0 , 1 ] ) }
59
+ override DataFlow:: Node getAnInput ( ) { result = this .getArg ( [ 0 , 1 ] ) }
60
60
}
61
61
62
62
class DjangoResponseDefinition extends DataFlow:: Node , HeaderDeclaration:: Range {
@@ -67,7 +67,7 @@ private module PrivateDjango {
67
67
headerInput .asCfgNode ( ) = this .asCfgNode ( ) .( DefinitionNode ) .getValue ( )
68
68
}
69
69
70
- override DataFlow:: Node getHeaderInput ( ) {
70
+ override DataFlow:: Node getAnInput ( ) {
71
71
result .asExpr ( ) in [ headerInput .asExpr ( ) , this .asExpr ( ) .( Subscript ) .getIndex ( ) ]
72
72
}
73
73
}
Original file line number Diff line number Diff line change @@ -54,20 +54,20 @@ module ExperimentalFlask {
54
54
headerInput .asCfgNode ( ) = this .asCfgNode ( ) .( DefinitionNode ) .getValue ( )
55
55
}
56
56
57
- override DataFlow:: Node getHeaderInput ( ) {
57
+ override DataFlow:: Node getAnInput ( ) {
58
58
result .asExpr ( ) in [ headerInput .asExpr ( ) , this .asExpr ( ) .( Subscript ) .getIndex ( ) ]
59
59
}
60
60
}
61
61
62
62
private class FlaskMakeResponseExtend extends DataFlow:: CallCfgNode , HeaderDeclaration:: Range {
63
63
FlaskMakeResponseExtend ( ) { this .getFunction ( ) = headerInstanceCall ( ) }
64
64
65
- override DataFlow:: Node getHeaderInput ( ) { result = this .getArg ( _) }
65
+ override DataFlow:: Node getAnInput ( ) { result = this .getArg ( _) }
66
66
}
67
67
68
68
private class FlaskResponse extends DataFlow:: CallCfgNode , HeaderDeclaration:: Range {
69
69
FlaskResponse ( ) { this = Flask:: Response:: classRef ( ) .getACall ( ) }
70
70
71
- override DataFlow:: Node getHeaderInput ( ) { result = this .getArgByName ( "headers" ) }
71
+ override DataFlow:: Node getAnInput ( ) { result = this .getArgByName ( "headers" ) }
72
72
}
73
73
}
Original file line number Diff line number Diff line change @@ -24,7 +24,7 @@ private module Werkzeug {
24
24
this .getFunction ( ) .( DataFlow:: AttrRead ) .getAttributeName ( ) = "add"
25
25
}
26
26
27
- override DataFlow:: Node getHeaderInput ( ) { result = this .getArg ( _) }
27
+ override DataFlow:: Node getAnInput ( ) { result = this .getArg ( _) }
28
28
}
29
29
}
30
30
}
Original file line number Diff line number Diff line change @@ -13,6 +13,6 @@ class HeaderInjectionFlowConfig extends TaintTracking::Configuration {
13
13
override predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
14
14
15
15
override predicate isSink ( DataFlow:: Node sink ) {
16
- sink = any ( HeaderDeclaration headerDeclaration ) .getHeaderInput ( )
16
+ sink = any ( HeaderDeclaration headerDeclaration ) .getAnInput ( )
17
17
}
18
18
}
You can’t perform that action at this time.
0 commit comments