/**

* Provides classes modeling security-relevant aspects of the `baize` PyPI package.

*

* See https://pypi.org/project/baize.

*/

private import python

private import semmle.python.dataflow.new.DataFlow

private import semmle.python.dataflow.new.TaintTracking

private import semmle.python.Concepts

private import semmle.python.ApiGraphs

private import semmle.python.frameworks.internal.InstanceTaintStepsHelper

private import semmle.python.frameworks.Stdlib

/**

* Provides models for `baize` PyPI package.

*

* See https://pypi.org/project/baize.

*/

module Baize {

/**

* A call to the `baize.asgi.FileResponse` constructor as a sink for Filesystem access.

*

* it is not contained to Starlette source code but it is mentioned in documents as an alternative to Starlette FileResponse

*/

class BaizeFileResponseCall extends FileSystemAccess::Range, API::CallNode {

BaizeFileResponseCall() {

this = API::moduleImport("baize").getMember("asgi").getMember("FileResponse").getACall()

}

override DataFlow::Node getAPathArgument() {

result = this.getParameter(0, "filepath").asSink()

}

}

}