| 95 | |
| 96 | # --- ORD1014 --- |
| 97 | class TestOrd1014: |
| 98 | def test_tainted_silent_disabled(self): |
| 99 | # ORD1014 disabled: ord() returns the integer code point of a character — |
| 100 | # never a security sink; generates FPs in encoding/codec implementations. |
| 101 | assert not_fires("c=request.GET.get('char'); ord(c)", "ORD1014") |
| 102 | def test_constant_safe(self): |
| 103 | assert not_fires("ord('A')", "ORD1014") |
| 104 | |
| 105 | # --- CHR1017 --- |
| 106 | class TestChr1017: |
nothing calls this directly
no outgoing calls
no test coverage detected