CodeQL library for Python
codeql/python-all 0.6.4 (changelog, source)
Search

Module Request

Provides the sources and taint-flow for HTTP servers defined using the standard library (stdlib). Specifically, we model HttpRequestTaintSources from instances of BaseHTTPRequestHandler (or subclasses) and form parsing using cgi.FieldStorage.

Import path

import semmle.python.web.stdlib.Request

Imports

Classes

BaseHTTPRequestHandlerKind

TaintKind for an instance of BaseHttpRequestHandler.

CgiFieldStorageFieldKind

TaintKind for the field of a parsed HTTP form.

CgiFieldStorageFormKind

TaintKind for a parsed HTTP form.

CgiFieldStorageSource

Source of parsed HTTP forms (by using the cgi module).

HTTPMessageKind

TaintKind for headers (instance of HttpMessage).

StdLibRequestSource

Source of BaseHttpRequestHandler instances.