SONARPY-3747 Fix FN on S8370 to raise issue on all children (#827)

GitOrigin-RevId: b12a8338b5faa6b2658c86f5f028dc3c09920f1e

Author: joke1196

python-checks/src/main/java/org/sonar/python/checks/FlaskPostWithQueryParameterCheck.java

@@ -57,8 +57,16 @@ private static void checkPostWithQueryParams(SubscriptionContext ctx) {
       return;
     }
 
-    TreeUtils.firstChild(functionDef, tree -> tree instanceof QualifiedExpression qe && isRequestArgs(qe, ctx))
-      .ifPresent(requestArgs -> ctx.addIssue(requestArgs, MESSAGE));
+    findRequestArgsRecursively(functionDef, ctx)
+      .forEach(requestArgs -> ctx.addIssue(requestArgs, MESSAGE));
+  }
+
+  private static Stream<Tree> findRequestArgsRecursively(Tree tree, SubscriptionContext ctx) {
+    if (tree instanceof QualifiedExpression qe && isRequestArgs(qe, ctx)) {
+      return Stream.of(tree);
+    }
+    return tree.children().stream()
+      .flatMap(child -> findRequestArgsRecursively(child, ctx));
   }
 
   private static boolean isPostRoute(FunctionDef functionDef, SubscriptionContext ctx) {
@@ -127,3 +135,4 @@ private static boolean isRequestArgs(QualifiedExpression qualifiedExpr, Subscrip
     return TypeMatchers.isObjectOfType(REQUEST_FQN).isTrueFor(request, ctx);
   }
 }
+

python-checks/src/test/resources/checks/flaskPostWithQueryParameter.py

@@ -40,6 +40,7 @@ def getting_args():
 def update_resource():
     key = request.args.get('key')  # Noncompliant
     #     ^^^^^^^^^^^^
+    response.set_cookie(request.args.get("name"), request.args.get("value"))  # Noncompliant 2
     return 'Updated'
 
 @app.route('/data', methods=['GET','POST'])