Starlette is the ASGI toolkit behind FastAPI. Request exposes HTTP input; the responses module provides HTMLResponse / RedirectResponse / FileResponse (sinks for XSS, open-redirect, path-traversal respectively).
.Request.query_params().Request.path_params().Request.form().HTMLResponse().RedirectResponse().FileResponse().HTMLResponse()SinkHTMLResponse(content, status_code=200, headers=None, media_type=None, ...) -> Response
Raw HTML response. XSS sink on tainted content.
0.RedirectResponse()SinkRedirectResponse(url, status_code=307, ...) -> Response
Redirect response. Open-redirect sink.
0.FileResponse()SinkFileResponse(path, status_code=200, headers=None, media_type=None, filename=None, ...) -> Response
Serves a file. Path-traversal sink on user-controlled path.
0| FQN | Field | |
|---|---|---|
| starlette | fqns[0] | |
| starlette.requests | fqns[1] | |
| starlette.responses | fqns[2] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
from codepathfinder.go_rule import PyStarlette