[Python][Questions] CodeQL security query is not able to detect CWE from given bad example in repository.
Offen
question
- Vorherrschende Sprache
- CodeQL
- Sterne
- 10.1k
- Forks
- 2.1k
- Ø Merge
- 2 T. 15 Std.
- Gemergte PRs (30 T.)
- 141
Beschreibung
I have created codeql database of this python file [https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/examples/tarslip_bad.py](https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/examples/tarslip_bad.py).
But when I analyze database using [https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/TarSlip.ql](https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/TarSlip.ql) this query, I see nothing in query results.
Can someone help me why codeql query is not able to detect CWE-22 from the given example?
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.