Add support for ModelViewSet functions

GeekMasher · GeekMasher · commit eb9b32473e75 · 2023-09-29T14:26:39.000+01:00
diff --git a/python/ql/lib/semmle/python/frameworks/RestFramework.qll b/python/ql/lib/semmle/python/frameworks/RestFramework.qll
@@ -131,7 +131,10 @@ private module RestFramework {
           "initial", "http_method_not_allowed", "permission_denied", "throttled",
           "get_authenticate_header", "perform_content_negotiation", "perform_authentication",
           "check_permissions", "check_object_permissions", "check_throttles", "determine_version",
-          "initialize_request", "finalize_response", "dispatch", "options"
+          "initialize_request", "finalize_response", "dispatch", "options",
+          // ModelViewSet
+          // https://github.com/encode/django-rest-framework/blob/master/rest_framework/viewsets.py
+          "create", "retrieve", "update", "partial_update", "destroy", "list"
         ]
     }
   }

Original file line number	Diff line number	Diff line change
`@@ -131,7 +131,10 @@ private module RestFramework {`
`131`	`131`	`"initial", "http_method_not_allowed", "permission_denied", "throttled",`
`132`	`132`	`"get_authenticate_header", "perform_content_negotiation", "perform_authentication",`
`133`	`133`	`"check_permissions", "check_object_permissions", "check_throttles", "determine_version",`
`134`		`- "initialize_request", "finalize_response", "dispatch", "options"`
	`134`	`+ "initialize_request", "finalize_response", "dispatch", "options",`
	`135`	`+ // ModelViewSet`
	`136`	`+ // https://github.com/encode/django-rest-framework/blob/master/rest_framework/viewsets.py`
	`137`	`+ "create", "retrieve", "update", "partial_update", "destroy", "list"`
`135`	`138`	`]`
`136`	`139`	`}`
`137`	`140`	`}`