Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 90d0cff

Browse files
yoffyoff
committed
Python: Use flask routing
1 parent 383d846 commit 90d0cff

2 files changed

Lines changed: 19 additions & 6 deletions

File tree

‎python/ql/test/experimental/query-tests/Security-new-dataflow/CWE-089/SqlInjection.expected‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,16 @@
11
edges
2+
| sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:21:24:21:77 | ControlFlowNode for BinaryExpr |
3+
| sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:24:38:24:95 | ControlFlowNode for BinaryExpr |
4+
| sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:25:26:25:83 | ControlFlowNode for BinaryExpr |
5+
| sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:26:28:26:85 | ControlFlowNode for BinaryExpr |
26
nodes
7+
| sql_injection.py:14:15:14:22 | SSA variable username | semmle.label | SSA variable username |
8+
| sql_injection.py:21:24:21:77 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
9+
| sql_injection.py:24:38:24:95 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
10+
| sql_injection.py:25:26:25:83 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
11+
| sql_injection.py:26:28:26:85 | ControlFlowNode for BinaryExpr | semmle.label | ControlFlowNode for BinaryExpr |
312
#select
13+
| sql_injection.py:21:24:21:77 | ControlFlowNode for BinaryExpr | sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:21:24:21:77 | ControlFlowNode for BinaryExpr | This SQL query depends on $@. | sql_injection.py:14:15:14:22 | SSA variable username | a user-provided value |
14+
| sql_injection.py:24:38:24:95 | ControlFlowNode for BinaryExpr | sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:24:38:24:95 | ControlFlowNode for BinaryExpr | This SQL query depends on $@. | sql_injection.py:14:15:14:22 | SSA variable username | a user-provided value |
15+
| sql_injection.py:25:26:25:83 | ControlFlowNode for BinaryExpr | sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:25:26:25:83 | ControlFlowNode for BinaryExpr | This SQL query depends on $@. | sql_injection.py:14:15:14:22 | SSA variable username | a user-provided value |
16+
| sql_injection.py:26:28:26:85 | ControlFlowNode for BinaryExpr | sql_injection.py:14:15:14:22 | SSA variable username | sql_injection.py:26:28:26:85 | ControlFlowNode for BinaryExpr | This SQL query depends on $@. | sql_injection.py:14:15:14:22 | SSA variable username | a user-provided value |

‎python/ql/test/experimental/query-tests/Security-new-dataflow/CWE-089/sql_injection.py‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,17 @@
1-
"""This is copied from ql/python/ql/test/library-tests/web/django/test.py
2-
and a only a slight extension of ql/python/ql/src/Security/CWE-089/examples/sql_injection.py
1+
"""This is adapted from ql/python/ql/test/query-tests\Security\CWE-089
2+
we now prefer to setup routing by flask
33
"""
44

5-
from django.conf.urls import url
65
from django.db import connection, models
76
from django.db.models.expressions import RawSQL
7+
from flask import Flask, request
8+
app = Flask(__name__)
89

910
class User(models.Model):
1011
pass
1112

12-
def show_user(request, username):
13+
@app.route("/users/<username>")
14+
def show_user(username):
1315
with connection.cursor() as cursor:
1416
# GOOD -- Using parameters
1517
cursor.execute("SELECT * FROM users WHERE username = %s", username)
@@ -36,5 +38,3 @@ def show_user(request, username):
3638
# When testing this out locally, none of the queries worked against SQLite3, but I could use
3739
# the SQL injection against MySQL.
3840
User.objects.raw("SELECT * FROM users WHERE username = '%s'", (username,))
39-
40-
urlpatterns = [url(r'^users/(?P<username>[^/]+)$', show_user)]

0 commit comments

Comments
 (0)