| 52 | |
| 53 | # --- DIR849 --- |
| 54 | class TestDir849: |
| 55 | def test_tainted_silent_disabled(self): |
| 56 | # DIR849 disabled: dir() lists attributes for introspection — not a security |
| 57 | # sink; generates FPs in code that uses dir() for reflection/debugging. |
| 58 | assert not_fires("o=request.GET.get('obj'); dir(o)", "DIR849") |
| 59 | def test_constant_safe(self): |
| 60 | assert not_fires("dir(str)", "DIR849") |
| 61 | |
| 62 | # --- CALLABLE1131 --- |
| 63 | class TestCallable1131: |
nothing calls this directly
no outgoing calls
no test coverage detected