Skip to content

Commit 333367c

Browse files
committed
Python: Add threat-modeling of raw_input
1 parent 7d3793e commit 333367c

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

python/ql/lib/semmle/python/frameworks/Stdlib.model.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,8 @@ extensions:
1414

1515
- ['sys', 'Member[stdin]', 'stdin']
1616
- ['builtins', 'Member[input].ReturnValue', 'stdin']
17+
- ['builtins', 'Member[raw_input].ReturnValue', 'stdin'] # python 2 only
18+
1719

1820
# if no argument is given, the default is to use sys.argv[1:]
1921
- ['argparse.ArgumentParser', 'Member[parse_args,parse_known_args].WithArity[0].ReturnValue', 'commandargs']

0 commit comments

Comments
 (0)