File tree Expand file tree Collapse file tree 4 files changed +9
-19
lines changed
src/semmle/python/web/turbogears
test/library-tests/web/turbogears Expand file tree Collapse file tree 4 files changed +9
-19
lines changed Original file line number Diff line number Diff line change @@ -5,6 +5,8 @@ import semmle.python.web.Http
55import TurboGears
66
77class ControllerMethodReturnValue extends HttpResponseTaintSink {
8+ override string toString ( ) { result = "TurboGears ControllerMethodReturnValue" }
9+
810 ControllerMethodReturnValue ( ) {
911 exists ( TurboGearsControllerMethod m |
1012 m .getAReturnValueFlowNode ( ) = this and
@@ -16,6 +18,8 @@ class ControllerMethodReturnValue extends HttpResponseTaintSink {
1618}
1719
1820class ControllerMethodTemplatedReturnValue extends HttpResponseTaintSink {
21+ override string toString ( ) { result = "TurboGears ControllerMethodTemplatedReturnValue" }
22+
1923 ControllerMethodTemplatedReturnValue ( ) {
2024 exists ( TurboGearsControllerMethod m |
2125 m .getAReturnValueFlowNode ( ) = this and
Original file line number Diff line number Diff line change 1- | test.py:8:16:8:69 | Taint sink | externally controlled string |
2- | test.py:14:16:14:50 | Taint sink | externally controlled string |
3- | test.py:19:16:19:50 | Taint sink | externally controlled string |
4- | test.py:23:16:23:50 | Taint sink | externally controlled string |
5- | test.py:27:16:27:38 | Taint sink | {externally controlled string} |
6- FIXME
1+ | test.py:8:16:8:69 | TurboGears ControllerMethodReturnValue | externally controlled string |
2+ | test.py:14:16:14:50 | TurboGears ControllerMethodReturnValue | externally controlled string |
3+ | test.py:19:16:19:50 | TurboGears ControllerMethodReturnValue | externally controlled string |
4+ | test.py:23:16:23:50 | TurboGears ControllerMethodReturnValue | externally controlled string |
5+ | test.py:27:16:27:38 | TurboGears ControllerMethodTemplatedReturnValue | {externally controlled string} |
Load Diff This file was deleted.
Load Diff This file was deleted.
You can’t perform that action at this time.
0 commit comments