Skip to content

Commit 0be2c6b

Browse files
committed
Add SQLEscapySanitizerCall class
1 parent 986f2f4 commit 0be2c6b

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

python/ql/src/experimental/semmle/python/frameworks/SqlAlchemy.qll

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ private import semmle.python.dataflow.new.DataFlow
88
private import semmle.python.dataflow.new.TaintTracking
99
private import semmle.python.ApiGraphs
1010
private import semmle.python.Concepts
11+
private import experimental.semmle.python.Concepts
1112

1213
private module SqlAlchemy {
1314
/**
@@ -117,4 +118,17 @@ private module SqlAlchemy {
117118
)
118119
}
119120
}
121+
122+
/**
123+
* Gets a reference to `sqlescapy.sqlescape`.
124+
*
125+
* See https://pypi.org/project/sqlescapy/
126+
*/
127+
class SQLEscapySanitizerCall extends DataFlow::CallCfgNode, SQLEscape::Range {
128+
SQLEscapySanitizerCall() {
129+
this = API::moduleImport("sqlescapy").getMember("sqlescape").getACall()
130+
}
131+
132+
override DataFlow::Node getAnInput() { result = this.getArg(0) }
133+
}
120134
}

0 commit comments

Comments
 (0)