nyx/tests/fixtures/ldap_injection/python/baseline_constant_ldap.py
2026-05-07 01:29:31 -04:00

10 lines
305 B
Python

# Baseline: filter is a compile-time constant. No taint reaches `search_s` so
# no LDAP_INJECTION finding fires.
import ldap
def lookup():
conn = ldap.initialize("ldap://example.com")
return conn.search_s(
"ou=people,dc=example,dc=com", ldap.SCOPE_SUBTREE, "(objectClass=person)"
)