We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d7ad5a0 commit 3676262Copy full SHA for 3676262
python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/mongoengine_bad.py
@@ -18,7 +18,7 @@ def connect_find():
18
unsafe_search = request.args['search']
19
json_search = json.loads(unsafe_search)
20
21
- db = me.connect('mydb')
+ db = me.connect('mydb')
22
return db.movie.find({'name': json_search}) #$ result=BAD
23
24
@app.route("/connection_connect_find")
@@ -57,7 +57,7 @@ def subscript_find():
57
58
59
60
61
return db['movie'].find({'name': json_search}) #$ result=BAD
62
63
# if __name__ == "__main__":
0 commit comments