File tree Expand file tree Collapse file tree 2 files changed +2
-5
lines changed
lib/semmle/python/security/dataflow
src/experimental/semmle/python/security Expand file tree Collapse file tree 2 files changed +2
-5
lines changed Original file line number Diff line number Diff line change 6
6
7
7
private import python
8
8
private import semmle.python.dataflow.new.DataFlow
9
- private import semmle.python.dataflow.new.DataFlow2
10
9
private import semmle.python.dataflow.new.TaintTracking
11
10
private import semmle.python.Concepts
12
11
private import semmle.python.dataflow.new.RemoteFlowSources
Original file line number Diff line number Diff line change 1
1
private import python
2
- private import semmle.python.dataflow.new.TaintTracking2
3
2
private import semmle.python.dataflow.new.TaintTracking
4
3
private import semmle.python.dataflow.new.DataFlow
5
- private import semmle.python.dataflow.new.DataFlow2
6
4
private import semmle.python.ApiGraphs
7
5
private import semmle.python.dataflow.new.RemoteFlowSources
8
6
private import semmle.python.frameworks.Flask
@@ -164,7 +162,7 @@ class NonConstantTimeComparisonSink extends DataFlow::Node {
164
162
165
163
/** Holds if remote user input was used in the comparison. */
166
164
predicate includesUserInput ( ) {
167
- UserInputInComparisonFlow:: flowTo ( DataFlow2 :: exprNode ( anotherParameter ) )
165
+ UserInputInComparisonFlow:: flowTo ( DataFlow :: exprNode ( anotherParameter ) )
168
166
}
169
167
}
170
168
@@ -175,7 +173,7 @@ class SecretSource extends DataFlow::Node {
175
173
SecretSource ( ) { secret = this .asExpr ( ) }
176
174
177
175
/** Holds if the secret was deliverd by remote user. */
178
- predicate includesUserInput ( ) { UserInputSecretFlow:: flowTo ( DataFlow2 :: exprNode ( secret ) ) }
176
+ predicate includesUserInput ( ) { UserInputSecretFlow:: flowTo ( DataFlow :: exprNode ( secret ) ) }
179
177
}
180
178
181
179
/** A string for `match` that identifies strings that look like they represent secret data. */
You can’t perform that action at this time.
0 commit comments