Tainted flow: 'url' from requests.get (line 173, network input) → requests.get (network output)
Medium
- Category
- Data Flow
- Content
def fetch_img(url, timeout=30): try: r = requests.get(url, timeout=timeout) if r.status_code == 200 and r.content[:4] in (b'\x89PNG', b'\xff\xd8\xff\xe0', b'\xff\xd8\xff\xe1', b'GIF8'): return io.BytesIO(r.content) except Exception:- Confidence
- 93% confidence
- Finding
- r = requests.get(url, timeout=timeout)
