PYT-3038 update flask version to latest

.github/workflows/main.yml

@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ['3.7', '3.8', '3.9', '3.10', '3.11']
+        python-version: ['3.8', '3.9', '3.10', '3.11', '3.12']
 
     steps:
       - uses: actions/checkout@v3
@@ -65,7 +65,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with:
-          python-version: '3.7'
+          python-version: '3.8'
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip

setup.py

@@ -12,7 +12,7 @@
 aiohttp_extras = {"aiohttp<4"} | trigger_extras
 django_extras = {"Django<5"} | trigger_extras
 falcon_extras = {"falcon<4", "falcon-multipart==0.2.0"} | trigger_extras
-flask_extras = {"Flask<3"} | trigger_extras
+flask_extras = {"Flask<4"} | trigger_extras
 fastapi_extras = {
     "fastapi<1",
     "uvicorn[standard]<1.0",

src/vulnpy/django/vulnerable_asgi.py

@@ -20,8 +20,10 @@ async def _get_user_input(request):
         and django.VERSION[0] < 4
         and not request.GET.get("user_input")
     ):
-        header_user_input = request.META.get("HTTP_QUERY_STRING")
-        return urllib.parse.unquote(header_user_input.split("=", 1)[1])
+        header_user_input = request.META.get("HTTP_QUERY_STRING")  # pragma: no cover
+        return urllib.parse.unquote(
+            header_user_input.split("=", 1)[1]
+        )  # pragma: no cover
 
     if request.method == "GET":
         return request.GET.get("user_input", "")