File tree Expand file tree Collapse file tree 4 files changed +8
-8
lines changed
src/Security/CWE-601/examples
test/query-tests/Security/CWE-601 Expand file tree Collapse file tree 4 files changed +8
-8
lines changed Original file line number Diff line number Diff line change 44
55@app .route ('/' )
66def hello ():
7- target = files = request .args .get ('target' , '' )
7+ target = request .args .get ('target' , '' )
88 return redirect (target , code = 302 )
Original file line number Diff line number Diff line change 66
77@app .route ('/' )
88def hello ():
9- target = files = request .args .get ('target' , '' )
9+ target = request .args .get ('target' , '' )
1010 if target == VALID_REDIRECT :
1111 return redirect (target , code = 302 )
1212 else :
Original file line number Diff line number Diff line change 11edges
2- | test.py:7:22 :7:33 | dict of externally controlled string | test.py:7:22 :7:51 | externally controlled string |
3- | test.py:7:22 :7:33 | dict of externally controlled string | test.py:7:22 :7:51 | externally controlled string |
4- | test.py:7:22 :7:51 | externally controlled string | test.py:8:21:8:26 | externally controlled string |
5- | test.py:7:22 :7:51 | externally controlled string | test.py:8:21:8:26 | externally controlled string |
2+ | test.py:7:14 :7:25 | dict of externally controlled string | test.py:7:14 :7:43 | externally controlled string |
3+ | test.py:7:14 :7:25 | dict of externally controlled string | test.py:7:14 :7:43 | externally controlled string |
4+ | test.py:7:14 :7:43 | externally controlled string | test.py:8:21:8:26 | externally controlled string |
5+ | test.py:7:14 :7:43 | externally controlled string | test.py:8:21:8:26 | externally controlled string |
66#select
7- | test.py:8:21:8:26 | target | test.py:7:22 :7:33 | dict of externally controlled string | test.py:8:21:8:26 | externally controlled string | Untrusted URL redirection due to $@. | test.py:7:22 :7:33 | Attribute | a user-provided value |
7+ | test.py:8:21:8:26 | target | test.py:7:14 :7:25 | dict of externally controlled string | test.py:8:21:8:26 | externally controlled string | Untrusted URL redirection due to $@. | test.py:7:14 :7:25 | Attribute | a user-provided value |
Original file line number Diff line number Diff line change 44
55@app .route ('/' )
66def hello ():
7- target = files = request .args .get ('target' , '' )
7+ target = request .args .get ('target' , '' )
88 return redirect (target , code = 302 )
99
1010
You can’t perform that action at this time.
0 commit comments