We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 49f5d38 commit c85ea9aCopy full SHA for c85ea9a
python/ql/src/Security/CWE-918/examples/ServerSideRequestForgery_full.py
@@ -8,8 +8,8 @@ def full_ssrf():
8
target = request.args["target"]
9
10
# BAD: user has full control of URL
11
- resp = request.get("https://" + target + ".example.com/data/")
+ resp = requests.get("https://" + target + ".example.com/data/")
12
13
# GOOD: `subdomain` is controlled by the server.
14
subdomain = "europe" if target == "EU" else "world"
15
- resp = request.get("https://" + subdomain + ".example.com/data/")
+ resp = requests.get("https://" + subdomain + ".example.com/data/")
0 commit comments