Tainted flow: 'url' from requests.post (line 207, network input) → requests.get (network output)
Medium
- Category
- Data Flow
- Content
os.makedirs(out_dir, exist_ok=True) print(f"📥 下载...") r = requests.get(url, stream=True) with open(zip_path, "wb") as f: for c in r.iter_content(8192): f.write(c)- Confidence
- 96% confidence
- Finding
- r = requests.get(url, stream=True)
