| 61 | |
| 62 | # --- CALLABLE1131 --- |
| 63 | class TestCallable1131: |
| 64 | def test_tainted_silent_disabled(self): |
| 65 | # CALLABLE1131 disabled: callable() checks if object is callable — |
| 66 | # not a security sink; generates FPs from deep inter-procedural taint. |
| 67 | assert not_fires("o=request.GET.get('fn'); callable(o)", "CALLABLE1131") |
| 68 | def test_constant_safe(self): |
| 69 | assert not_fires("callable(print)", "CALLABLE1131") |
| 70 | |
| 71 | # --- BYTES1005 --- |
| 72 | class TestBytes1005: |
nothing calls this directly
no outgoing calls
no test coverage detected