The logging module. Most uses are neutral. Log-injection findings arise when user-controlled data is logged without sanitization — attackers can break log line boundaries with \n or forge subsequent log entries.
.info().error().warning().debug().info()Sinklogging.info(msg, *args, **kwargs) -> None
Writes an info log. Log-injection sink when msg is tainted and contains newlines.
0.error()Sinklogging.error(msg, *args, **kwargs) -> None
Writes an error log. Log-injection sink.
0.warning()Sinklogging.warning(msg, *args, **kwargs) -> None
Writes a warning log. Log-injection sink.
0.debug()Sinklogging.debug(msg, *args, **kwargs) -> None
Writes a debug log. Log-injection sink.
0| FQN | Field | |
|---|---|---|
| logging | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyLogging