File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -19,14 +19,14 @@ def ssrf_test2():
1919def ssrf_test3 ():
2020 user_input = request .args ['untrusted_input' ]
2121 # NOT OK -- user has full control
22- response = requests .request ('<method>' , user_input ) # $ Alert[py/full-ssrf]
22+ requests .request ('<method>' , user_input ) # $ Alert[py/full-ssrf]
2323
2424def ssrf_test_with_policy1 ():
2525 user_input = request .args ['untrusted_input' ]
2626 policy = AntiSSRFPolicy ()
2727 session = policy .get_antissrf_session ()
2828 # OK -- dangerous user input is filtered by AntiSSRFPolicy
29- response = session .get (user_input )
29+ session .get (user_input )
3030
3131def ssrf_test_with_policy2 ():
3232 user_input = request .args ['untrusted_input' ]
You can’t perform that action at this time.
0 commit comments