File tree Expand file tree Collapse file tree 1 file changed +3
-5
lines changed
python/ql/lib/semmle/python/frameworks Expand file tree Collapse file tree 1 file changed +3
-5
lines changed Original file line number Diff line number Diff line change @@ -521,7 +521,7 @@ module Flask {
521521 }
522522
523523 /**
524- * A `send_from_directory` call considered a sink for file system access vulnerabilities .
524+ * A call to `flask.send_from_directory` .
525525 *
526526 * See https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_from_directory
527527 */
@@ -536,14 +536,12 @@ module Flask {
536536 }
537537
538538 /**
539- * A `send_file` call considered a sink for file system access vulnerabilities .
539+ * A call to `flask.send_file` .
540540 *
541541 * See https://flask.palletsprojects.com/en/1.1.x/api/#flask.send_file
542542 */
543543 class FlaskSendFile extends FileSystemAccess:: Range , DataFlow:: CallCfgNode {
544- FlaskSendFile ( ) {
545- this = API:: moduleImport ( "flask" ) .getMember ( "send_file" ) .getACall ( )
546- }
544+ FlaskSendFile ( ) { this = API:: moduleImport ( "flask" ) .getMember ( "send_file" ) .getACall ( ) }
547545
548546 override DataFlow:: Node getAPathArgument ( ) {
549547 result in [ this .getArg ( 0 ) , this .getArgByName ( "filename_or_fp" ) ]
You can’t perform that action at this time.
0 commit comments