foxguard 0.12.0

A security scanner as fast as a linter, written in Rust. 200+ built-in rules across 12 source languages.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

# Negative FastAPI fixture (issue #29). All sinks get non-tainted
# arguments; `py/taint-*` must stay silent.

import os
import pickle

from fastapi import FastAPI, Request  # noqa: F401

app = FastAPI()


@app.post("/clean-pickle")
async def clean_pickle():
    return pickle.loads(b"static-bytes")


@app.get("/kills-taint")
async def kills_taint(request: Request):
    value = request.query_params["x"]
    value = "trusted-literal"
    os.system(value)


@app.get("/static")
async def static_cmd():
    os.system("ls /tmp")