We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent bee8e6f commit eeefdc5Copy full SHA for eeefdc5
python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/WebAppConstantSecretKeyFlask.qll
@@ -63,13 +63,12 @@ module FlaskConstantSecretKeyConfig {
63
sink = attr.getValue()
64
)
65
or
66
- exists(SecretKeyAssignStmt e |
67
- sink.asExpr() = e.getValue()
68
- )
+ exists(SecretKeyAssignStmt e | sink.asExpr() = e.getValue())
69
) and
70
exists(sink.getScope().getLocation().getFile().getRelativePath()) and
71
not sink.getScope().getLocation().getFile().inStdlib()
72
}
+
73
/**
74
* An Assignments like `SECRET_KEY = ConstantValue`
75
* and `SECRET_KEY` file must be the Location that is specified in argument of `from_object` or `from_pyfile` methods
0 commit comments