-
Notifications
You must be signed in to change notification settings - Fork 23
Expand file tree
/
Copy pathflask.model.yml
More file actions
166 lines (166 loc) · 20.1 KB
/
flask.model.yml
File metadata and controls
166 lines (166 loc) · 20.1 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
extensions:
- addsTo:
pack: codeql/python-all
extensible: sourceModel
data:
- ["flask", "Member[app].Member[Flask].Instance.Member[open_instance_resource]", "Argument[1,resource:]", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_instance_resource]", "Argument[2,mode:]", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_instance_resource]", "Argument[3,encoding:]", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_instance_resource]", "ReturnValue", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_resource]", "Argument[1,resource:]", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_resource]", "Argument[2,mode:]", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_resource]", "Argument[3,encoding:]", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_resource]", "ReturnValue", "file"]
- ["flask", "Member[app].Member[Flask].Instance.Member[run]", "Argument[1,host:]", "environment"]
- ["flask", "Member[app].Member[Flask].Instance.Member[run]", "Argument[2,port:]", "environment"]
- ["flask", "Member[app].Member[Flask].Instance.Member[run]", "Argument[3,debug:]", "environment"]
- ["flask", "Member[app].Member[Flask].Instance.Member[run]", "Argument[4,load_dotenv:]", "environment"]
- ["flask", "Member[blueprints].Member[Blueprint].Instance.Member[open_resource]", "Argument[1,resource:]", "file"]
- ["flask", "Member[blueprints].Member[Blueprint].Instance.Member[open_resource]", "Argument[2,mode:]", "file"]
- ["flask", "Member[blueprints].Member[Blueprint].Instance.Member[open_resource]", "Argument[3,encoding:]", "file"]
- ["flask", "Member[blueprints].Member[Blueprint].Instance.Member[open_resource]", "ReturnValue", "file"]
- ["flask", "Member[cli].Member[FlaskGroup].Instance.Member[make_context]", "Argument[1,info_name:]", "environment"]
- ["flask", "Member[cli].Member[FlaskGroup].Instance.Member[make_context]", "Argument[2,args:]", "environment"]
- ["flask", "Member[cli].Member[FlaskGroup].Instance.Member[make_context]", "Argument[3,parent:]", "environment"]
- ["flask", "Member[cli].Member[FlaskGroup].Instance.Member[make_context]", "ReturnValue", "environment"]
- ["flask", "Member[cli].Member[ScriptInfo].Instance.Member[load_app]", "ReturnValue", "environment"]
- ["flask", "Member[cli].Member[load_dotenv]", "Argument[0,path:]", "environment"]
- ["flask", "Member[cli].Member[load_dotenv]", "ReturnValue", "environment"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_envvar]", "Argument[1,variable_name:]", "environment"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_envvar]", "Argument[2,silent:]", "environment"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_envvar]", "ReturnValue", "environment"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_envvar]", "ReturnValue", "file"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_file]", "Argument[1,filename:]", "file"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_file]", "Argument[2,load:]", "file"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_file]", "ReturnValue", "file"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_prefixed_env]", "ReturnValue", "environment"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_pyfile]", "Argument[1,filename:]", "file"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_pyfile]", "ReturnValue", "file"]
- ["flask", "Member[helpers].Member[get_debug_flag]", "ReturnValue", "environment"]
- ["flask", "Member[helpers].Member[get_load_dotenv]", "ReturnValue", "environment"]
- ["flask", "Member[sessions].Member[SecureCookieSessionInterface].Instance.Member[open_session]", "Argument[1,app:]", "remote"]
- ["flask", "Member[sessions].Member[SecureCookieSessionInterface].Instance.Member[save_session]", "Argument[1,app:]", "remote"]
- addsTo:
pack: codeql/python-all
extensible: sinkModel
data:
- ["flask", "Member[app].Member[Flask].Instance.Member[open_instance_resource]", "Argument[1,resource:]", "path-injection"]
- ["flask", "Member[app].Member[Flask].Instance.Member[open_resource]", "Argument[1,resource:]", "path-injection"]
- ["flask", "Member[blueprints].Member[Blueprint].Instance.Member[open_resource]", "Argument[1,resource:]", "path-injection"]
- ["flask", "Member[cli].Member[load_dotenv]", "Argument[0,path:]", "path-injection"]
- ["flask", "Member[cli].Member[prepare_import]", "Argument[0,path:]", "path-injection"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_envvar]", "Argument[2,silent:]", "path-injection"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_file]", "Argument[1,filename:]", "path-injection"]
- ["flask", "Member[config].Member[Config].Instance.Member[from_pyfile]", "Argument[1,filename:]", "path-injection"]
- addsTo:
pack: codeql/python-all
extensible: summaryModel
data:
- ["flask", "Member[app].Member[Flask].Instance.Member[app_context]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[create_jinja_environment]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[create_url_adapter]", "Argument[self]", "Argument[1,request:]", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[ensure_sync]", "Argument[1,func:]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[finalize_request]", "Argument[1,rv:]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[handle_http_exception]", "Argument[1,e:]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[handle_user_exception]", "Argument[1,e:]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[make_response]", "Argument[1,rv:]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[make_shell_context]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[process_response]", "Argument[1,response:]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[request_context]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[test_cli_runner]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[app].Member[Flask].Instance.Member[test_request_context]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[cli].Member[AppGroup].Instance.Member[command]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[cli].Member[ScriptInfo].Instance.Member[load_app]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[cli].Member[SeparatedPathType].Instance.Member[convert]", "Argument[2,param:]", "ReturnValue", "taint"]
- ["flask", "Member[cli].Member[SeparatedPathType].Instance.Member[convert]", "Argument[3,ctx:]", "ReturnValue", "taint"]
- ["flask", "Member[cli].Member[find_best_app]", "Argument[0,module:]", "ReturnValue", "taint"]
- ["flask", "Member[cli].Member[prepare_import]", "Argument[0,path:]", "ReturnValue", "taint"]
- ["flask", "Member[ctx].Member[after_this_request]", "Argument[0,f:]", "ReturnValue", "taint"]
- ["flask", "Member[helpers].Member[get_load_dotenv]", "Argument[0,default:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[dump]", "Argument[0,obj:]", "Argument[1,fp:]", "taint"]
- ["flask", "Member[json].Member[dumps]", "Argument[0,obj:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[load]", "Argument[0,fp:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[loads]", "Argument[0,s:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[provider].Member[DefaultJSONProvider].Instance.Member[dumps]", "Argument[1,obj:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[provider].Member[DefaultJSONProvider].Instance.Member[loads]", "Argument[1,s:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[PassDict].Instance.Member[to_json]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[PassDict].Instance.Member[to_json]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[PassList].Instance.Member[to_json]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TagBytes].Instance.Member[to_json]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TagBytes].Instance.Member[to_python]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TagMarkup].Instance.Member[to_python]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TagTuple].Instance.Member[to_json]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TagTuple].Instance.Member[to_python]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TagUUID].Instance.Member[to_json]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TaggedJSONSerializer].Instance.Member[dumps]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TaggedJSONSerializer].Instance.Member[loads]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TaggedJSONSerializer].Instance.Member[loads]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TaggedJSONSerializer].Instance.Member[tag]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[json].Member[tag].Member[TaggedJSONSerializer].Instance.Member[untag]", "Argument[1,value:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[auto_find_instance_path]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[create_global_jinja_loader]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[iter_blueprints]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[jinja_env]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[name]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[shell_context_processor]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[teardown_appcontext]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[template_filter]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[template_filter]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[template_global]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[template_global]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[template_test]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[app].Member[App].Instance.Member[template_test]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[after_app_request]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_context_processor]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_errorhandler]", "Argument[1,code:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_errorhandler]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_template_filter]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_template_filter]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_template_global]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_template_global]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_template_test]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_template_test]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_url_defaults]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[app_url_value_preprocessor]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[before_app_request]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[make_setup_state]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[make_setup_state]", "Argument[2,options:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[make_setup_state]", "Argument[3,first_registration:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[make_setup_state]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[blueprints].Member[Blueprint].Instance.Member[teardown_app_request]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[after_request]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[before_request]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[context_processor]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[delete]", "Argument[1,rule:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[delete]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[endpoint]", "Argument[1,endpoint:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[endpoint]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[errorhandler]", "Argument[1,code_or_exception:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[errorhandler]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[get]", "Argument[1,rule:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[get]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[patch]", "Argument[1,rule:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[patch]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[post]", "Argument[1,rule:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[post]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[put]", "Argument[1,rule:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[put]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[route]", "Argument[1,rule:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[route]", "Argument[self]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[teardown_request]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[url_defaults]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sansio].Member[scaffold].Member[Scaffold].Instance.Member[url_value_preprocessor]", "Argument[1,f:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SecureCookieSession].Instance.Member[get]", "Argument[2,default:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SecureCookieSession].Instance.Member[setdefault]", "Argument[2,default:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_domain]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_httponly]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_name]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_partitioned]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_path]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_samesite]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_cookie_secure]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[get_expiration_time]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[should_set_cookie]", "Argument[1,app:]", "ReturnValue", "taint"]
- ["flask", "Member[sessions].Member[SessionInterface].Instance.Member[should_set_cookie]", "Argument[2,session:]", "ReturnValue", "taint"]
- ["flask", "Member[views].Member[View].Instance.Member[as_view]", "Argument[1,name:]", "ReturnValue", "taint"]
- ["flask", "Member[views].Member[View].Instance.Member[as_view]", "Argument[self]", "ReturnValue", "taint"]