Python: Add Flask response model

tausbn · RasmusWL · commit cb1efa915e4d · 2023-12-08T11:27:50.000+01:00
diff --git a/python/ql/lib/semmle/python/frameworks/Flask.qll b/python/ql/lib/semmle/python/frameworks/Flask.qll
@@ -111,6 +111,8 @@ module Flask {
       result = API::moduleImport("flask").getMember("Response")
       or
       result = [FlaskApp::classRef(), FlaskApp::instance()].getMember("response_class")
+      or
+      result = ModelOutput::getATypeNode("flask.Response~Subclass").getASubclass*()
     }
 
     /**
diff --git a/python/ql/src/meta/ClassHierarchy/Find.ql b/python/ql/src/meta/ClassHierarchy/Find.ql
@@ -208,6 +208,12 @@ class DjangoHttpResponseFileResponse extends FindSubclassesSpec {
   }
 }
 
+class FlaskResponse extends FindSubclassesSpec {
+  FlaskResponse() { this = "flask.Response~Subclass" }
+
+  override API::Node getAlreadyModeledClass() { result = Flask::Response::classRef() }
+}
+
 bindingset[fullyQualified]
 predicate fullyQualifiedToYamlFormat(string fullyQualified, string type2, string path) {
   exists(int firstDot | firstDot = fullyQualified.indexOf(".", 0, 0) |

Original file line number	Diff line number	Diff line change
`@@ -111,6 +111,8 @@ module Flask {`
`111`	`111`	`result = API::moduleImport("flask").getMember("Response")`
`112`	`112`	`or`
`113`	`113`	`result = [FlaskApp::classRef(), FlaskApp::instance()].getMember("response_class")`
	`114`	`+ or`
	`115`	`+ result = ModelOutput::getATypeNode("flask.Response~Subclass").getASubclass*()`
`114`	`116`	`}`
`115`	`117`
`116`	`118`	`/**`
Original file line number	Diff line number	Diff line change
`@@ -208,6 +208,12 @@ class DjangoHttpResponseFileResponse extends FindSubclassesSpec {`
`208`	`208`	`}`
`209`	`209`	`}`
`210`	`210`
	`211`	`+class FlaskResponse extends FindSubclassesSpec {`
	`212`	`+ FlaskResponse() { this = "flask.Response~Subclass" }`
	`213`	`+`
	`214`	`+ override API::Node getAlreadyModeledClass() { result = Flask::Response::classRef() }`
	`215`	`+}`
	`216`	`+`
`211`	`217`	`bindingset[fullyQualified]`
`212`	`218`	`predicate fullyQualifiedToYamlFormat(string fullyQualified, string type2, string path) {`
`213`	`219`	`exists(int firstDot \| firstDot = fullyQualified.indexOf(".", 0, 0) \|`