Skip to content

Commit be87807

Browse files
bananabrtausbn
andauthored
Update python/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
You are totally right! I just scanned the module's document and assumed it would implement it all. Pasting the documentation here for future reference https://docs.python.org/3/library/uuid.html?highlight=uuid#uuid.UUID. Co-authored-by: Taus <[email protected]>
1 parent a2ad924 commit be87807

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

python/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ class PredictableResultSource extends DataFlow::Node {
2222
exists(API::Node uuidCallRet |
2323
uuidCallRet =
2424
API::moduleImport("uuid")
25-
.getMember(["uuid1", "uuid2", "uuid3", "uuid5"])
25+
.getMember(["uuid1", "uuid3", "uuid5"])
2626
.getACall()
2727
.getReturn()
2828
|

0 commit comments

Comments
 (0)