Module Request
Provides the sources and taint-flow for HTTP servers defined using the standard library (stdlib).
Specifically, we model HttpRequestTaintSource
s from instances of BaseHTTPRequestHandler
(or subclasses) and form parsing using cgi.FieldStorage
.
Import path
import semmle.python.web.stdlib.Request
Imports
Classes
BaseHTTPRequestHandlerKind |
TaintKind for an instance of BaseHttpRequestHandler. |
CgiFieldStorageFieldKind |
TaintKind for the field of a parsed HTTP form. |
CgiFieldStorageFormKind |
TaintKind for a parsed HTTP form. |
CgiFieldStorageSource |
Source of parsed HTTP forms (by using the |
HTTPMessageKind |
TaintKind for headers (instance of HttpMessage). |
StdLibRequestSource |
Source of BaseHttpRequestHandler instances. |