File tree Expand file tree Collapse file tree 1 file changed +12
-0
lines changed
python/ql/test/library-tests/frameworks/django-v2-v3 Expand file tree Collapse file tree 1 file changed +12
-0
lines changed Original file line number Diff line number Diff line change @@ -174,8 +174,20 @@ def some_method(self):
174
174
)
175
175
176
176
177
+ def kwargs_param (request , ** kwargs ): # $ requestHandler
178
+ ensure_tainted (
179
+ kwargs , # $ MISSING: tainted
180
+ kwargs ["foo" ], # $ MISSING: tainted
181
+ kwargs ["bar" ] # $ MISSING: tainted
182
+ )
183
+
184
+ ensure_tainted (request ) # $ tainted
185
+
186
+
177
187
# fake setup, you can't actually run this
178
188
urlpatterns = [
179
189
path ("test-taint/<foo>/<bar>" , test_taint ), # $ routeSetup="test-taint/<foo>/<bar>"
180
190
path ("ClassView/" , ClassView .as_view ()), # $ routeSetup="ClassView/"
191
+ path ("test-kwargs_param/<foo>/<bar>" , kwargs_param ), # $ routeSetup="test-kwargs_param/<foo>/<bar>"
192
+
181
193
]
You can’t perform that action at this time.
0 commit comments