René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Codemod: request-data-write Semgrep","articleBody":"Running semgrep on pygoat\r\n\r\n```\r\n    ❯❱ python.django.security.injection.request-data-write.request-data-write\r\n          Found user-controlled request data passed into '.write(...)'. This could be dangerous if a malicious\r\n          actor is able to control data into sensitive files. For example, a malicious actor could force      \r\n          rolling of critical log files, or cause a denial-of-service by using up available disk space.       \r\n          Instead, ensure that request data is properly escaped or sanitized.                                 \r\n          Details: https://sg.run/0Q6j                                                                        \r\n                                                                                                              \r\n           59┆ log_code = request.POST.get('log_code')\r\n           60┆ api_code = request.POST.get('api_code')\r\n           61┆ dirname = os.path.dirname(__file__)\r\n           62┆ log_filename = os.path.join(dirname, \"playground/A9/main.py\")\r\n           63┆ api_filename = os.path.join(dirname, \"playground/A9/api.py\")\r\n           64┆ f = open(log_filename,\"w\")\r\n           65┆ f.write(log_code)\r\n            ⋮┆----------------------------------------\r\n           60┆ api_code = request.POST.get('api_code')\r\n           61┆ dirname = os.path.dirname(__file__)\r\n           62┆ log_filename = os.path.join(dirname, \"playground/A9/main.py\")\r\n           63┆ api_filename = os.path.join(dirname, \"playground/A9/api.py\")\r\n           64┆ f = open(log_filename,\"w\")\r\n           65┆ f.write(log_code)\r\n           66┆ f.close()\r\n           67┆ f = open(api_filename,\"w\")\r\n           68┆ f.write(api_code)\r\n```\r\n\r\nWe don't have an existing transformer that aligns with this. Could we just wrap arguments to open and write with escape or some other sanitization func?","author":{"url":"https://github.com/clavedeluna","@type":"Person","name":"clavedeluna"},"datePublished":"2024-07-01T11:17:43.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/680/codemodder-python/issues/680"}