Skip to content

Commit ef48734

Browse files
committed
Python: Add taint-tests for SQLAlchemy
1 parent cb11239 commit ef48734

File tree

3 files changed

+17
-0
lines changed

3 files changed

+17
-0
lines changed
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
argumentToEnsureNotTaintedNotMarkedAsSpurious
2+
untaintedArgumentToEnsureTaintedNotMarkedAsMissing
3+
failures
Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
import experimental.meta.InlineTaintTest
2+
import experimental.semmle.python.frameworks.SqlAlchemy
Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
import sqlalchemy
2+
3+
def test_taint():
4+
ts = TAINTED_STRING
5+
6+
ensure_tainted(
7+
ts, # $ tainted
8+
sqlalchemy.text(ts), # $ MISSING: tainted
9+
sqlalchemy.sql.text(ts),# $ MISSING: tainted
10+
sqlalchemy.sql.expression.text(ts),# $ MISSING: tainted
11+
sqlalchemy.sql.expression.TextClause(ts),# $ MISSING: tainted
12+
)

0 commit comments

Comments
 (0)