File tree Expand file tree Collapse file tree
python/ql/src/experimental Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1212 */
1313
1414import python
15- import semmle.python.dataflow.new.DataFlow
16- import semmle.python.dataflow.new.TaintTracking
17- import semmle.python.ApiGraphs
18- import semmle.python.dataflow.new.RemoteFlowSources
19- import semmle.python.dataflow.new.internal.DataFlowPublic
2015import experimental.semmle.python.security.DecompressionBomb
2116import BombsFlow:: PathGraph
2217
Original file line number Diff line number Diff line change 11import python
2- import semmle.python.dataflow.new.DataFlow
32import semmle.python.dataflow.new.TaintTracking
43import semmle.python.ApiGraphs
54import semmle.python.dataflow.new.RemoteFlowSources
@@ -26,7 +25,7 @@ module DecompressionBomb {
2625
2726module ZipFile {
2827 /**
29- * A `zipfile` Instance
28+ * Gets `zipfile` Instance
3029 *
3130 * ```python
3231 * zipfile.ZipFile()
@@ -129,7 +128,7 @@ module TarFile {
129128 }
130129
131130 /**
132- * A tarfile instance for extracting compressed data
131+ * Gets tarfile instance for extracting compressed data
133132 */
134133 API:: Node tarfileExtractMember ( ) {
135134 result =
@@ -374,7 +373,7 @@ module BombsConfig implements DataFlow::ConfigSig {
374373 predicate isSource ( DataFlow:: Node source ) {
375374 source instanceof RemoteFlowSource
376375 or
377- source instanceof FastAPI
376+ source instanceof FastApi
378377 }
379378
380379 predicate isSink ( DataFlow:: Node sink ) { sink instanceof DecompressionBomb:: Sink }
Original file line number Diff line number Diff line change 11import python
2- import semmle.python.dataflow.new.DataFlow
32import semmle.python.dataflow.new.TaintTracking
43import semmle.python.ApiGraphs
54
@@ -8,10 +7,10 @@ import semmle.python.ApiGraphs
87 */
98module FileAndFormRemoteFlowSource {
109 /**
11- * A
10+ * A FastAPI Remote Flow Source for requests with multipart data in the body or requests with single file in the body
1211 */
13- class FastAPI extends DataFlow:: Node {
14- FastAPI ( ) {
12+ class FastApi extends DataFlow:: Node {
13+ FastApi ( ) {
1514 exists ( API:: Node fastApiParam , Expr fastApiUploadFile |
1615 fastApiParam =
1716 API:: moduleImport ( "fastapi" )
You can’t perform that action at this time.
0 commit comments