Tainted flow: 'url' from requests.post (line 463, network input) → requests.get (network output)
Medium
- Category
- Data Flow
- Content
def _download_and_save(url: str, filepath: str) -> bool: """Download content from URL and save to filepath.""" try: data = requests.get(url).content with open(filepath, 'wb') as f: f.write(data) return True- Confidence
- 95% confidence
- Finding
- data = requests.get(url).content
