| 270 | # =========================================================================== |
| 271 | |
| 272 | class TestRegressionPY102: |
| 273 | |
| 274 | def test_subprocess_taint_still_fires(self): |
| 275 | """PY102 taint flow must still work after engine changes.""" |
| 276 | code = """ |
| 277 | cmd = request.get('command') |
| 278 | subprocess.run(cmd) |
| 279 | """ |
| 280 | assert findings_for(code, "PY102"), \ |
| 281 | "PY102 regression: subprocess.run with tainted arg must still fire" |
nothing calls this directly
no outgoing calls
no test coverage detected