Module Request
Provides the sources and taint-flow for HTTP servers defined using the standard library (stdlib).
Specifically, we model HttpRequestTaintSources from instances of BaseHTTPRequestHandler
(or subclasses) and form parsing using cgi.FieldStorage.
Import path
import semmle.python.web.stdlib.Request
Imports
Classes
| BaseHTTPRequestHandlerKind |
TaintKind for an instance of BaseHttpRequestHandler. |
| CgiFieldStorageFieldKind |
TaintKind for the field of a parsed HTTP form. |
| CgiFieldStorageFormKind |
TaintKind for a parsed HTTP form. |
| CgiFieldStorageSource |
Source of parsed HTTP forms (by using the |
| HTTPMessageKind |
TaintKind for headers (instance of HttpMessage). |
| StdLibRequestSource |
Source of BaseHttpRequestHandler instances. |