Skip to content

Commit 6d4491e

Browse files
committed
Python: Modernize WebAppConstantSecretKey
1 parent 852b01c commit 6d4491e

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/WebAppConstantSecretKey.ql

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ newtype TFrameWork =
2525
Flask() or
2626
Django()
2727

28-
module WebAppConstantSecretKeyConfig implements DataFlow::StateConfigSig {
28+
private module WebAppConstantSecretKeyConfig implements DataFlow::StateConfigSig {
2929
class FlowState = TFrameWork;
3030

3131
predicate isSource(DataFlow::Node source, FlowState state) {
@@ -54,11 +54,11 @@ module WebAppConstantSecretKeyConfig implements DataFlow::StateConfigSig {
5454
}
5555
}
5656

57-
module WebAppConstantSecretKey = TaintTracking::GlobalWithState<WebAppConstantSecretKeyConfig>;
57+
module WebAppConstantSecretKeyFlow = TaintTracking::GlobalWithState<WebAppConstantSecretKeyConfig>;
5858

59-
import WebAppConstantSecretKey::PathGraph
59+
import WebAppConstantSecretKeyFlow::PathGraph
6060

61-
from WebAppConstantSecretKey::PathNode source, WebAppConstantSecretKey::PathNode sink
62-
where WebAppConstantSecretKey::flowPath(source, sink)
61+
from WebAppConstantSecretKeyFlow::PathNode source, WebAppConstantSecretKeyFlow::PathNode sink
62+
where WebAppConstantSecretKeyFlow::flowPath(source, sink)
6363
select sink, source, sink, "The SECRET_KEY config variable is assigned by $@.", source,
6464
" this constant String"

0 commit comments

Comments
 (0)