Remove callproc to reduce FP (#237)

ShiftLeftSecurity · Nov 5, 2020 · 42be861 · 42be861
1 parent 02a8b33
commit 42be861
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 4 deletions.
diff --git a/lib/logger.py b/lib/logger.py
@@ -29,7 +29,11 @@
     level=logging.INFO,
     format="%(message)s",
     datefmt="[%X]",
-    handlers=[RichHandler(console=console, markup=True, show_path=False, enable_link_path=False)],
+    handlers=[
+        RichHandler(
+            console=console, markup=True, show_path=False, enable_link_path=False
+        )
+    ],
 )
 LOG = logging.getLogger(__name__)
 

diff --git a/lib/pyt/vulnerability_definitions/all_sources_sinks.pyt b/lib/pyt/vulnerability_definitions/all_sources_sinks.pyt
@@ -434,11 +434,9 @@
             "curB.execute(": {"sanitisers": ["bindparams"]},
             "cursor.executemany(": {"sanitisers": ["bindparams"]},
             "cursor.executescript(": {"sanitisers": ["bindparams"]},
-            "cursor.callproc(": {"sanitisers": ["bindparams"]},
             "execute(": {"sanitisers": ["bindparams"]},
             "executemany(": {"sanitisers": ["bindparams"]},
             "executescript(": {"sanitisers": ["bindparams"]},
-            "callproc(": {"sanitisers": ["bindparams"]},
             "run_callable(": {},
             "scalar(": {},
             "database.execute(": {"sanitisers": ["bindparams"]},

diff --git a/lib/pyt/vulnerability_definitions/blackbox_mapping.json b/lib/pyt/vulnerability_definitions/blackbox_mapping.json
@@ -61,6 +61,6 @@
         "debug"
     ],
     "safe_path_list": [
-        "util", "models", "test", "setup.py"
+        "util", "models", "test", "setup.py", "__init__.py", "settings"
     ]
 }