- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
ID: python-flask/no-render-template-string
Language: Python
Severity: Error
Category: Security
Using templates created with string leads to server-side injection. Use template based on files.
import os
from functools import wraps
from flask import request, redirect, url_for, render_template_string
API_KEY = os.environ.get('VULN_FLASK_APP_API_KEY')
# Decorator to check if user is logged in
def require_api_key(f):
@wraps(f)
def wrap(*args, **kwargs):
api_key = request.cookies.get('api_key')
if API_KEY is None or api_key == API_KEY:
return f(*args, **kwargs)
else:
return render_template_string('no api key found'), 401
return wrap
|
|
For more information, please read the Code Analysis documentation
Identify code vulnerabilities directly in yourVS Code editor
Identify code vulnerabilities directly inJetBrains products