We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 6f8ec11 commit bbba906Copy full SHA for bbba906
2 files changed
python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/example_Flask_safe.py
@@ -7,11 +7,8 @@
7
8
9
@app.route('/')
10
-def DEB_EX():
11
- if 'logged_in' not in session:
12
- session['logged_in'] = 'value'
13
- # debuggin whether secret_key is secure or not
14
- return app.secret_key
+def CheckForSecretKeyValue():
+ return app.secret_key, session.get('logged_in')
15
16
17
if __name__ == '__main__':
python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/examples/example_Flask_unsafe.py
@@ -14,10 +14,7 @@
18
19
20
- # debugging whether secret_key is secure or not
21
return app.secret_key, session.get('logged_in')
22
23
0 commit comments