Add new rule for flask-route-decorator

[khanhldt]

Wahoo! New published rules with khanhldt.pnbj from @khanhldt.

See semgrep.dev/s/2ZJ3Y for more details.

Thanks for your contribution! ❤️

[CLAassistant]

All committers have signed the CLA.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[khanhldt]

I signed the CLA but that message doesn't get resolved for some reason.

[0xDC0DE]

It looks like Semgrep does not take the order of decorators into account currently: https://semgrep.dev/playground/s/pKLAZ

While your regex is a nice workaround, I am reporting this as a bug/feature request so that we can avoid complex regexes for this.

There are other route decorators in Flask besides the route decorator, e.g. delete, patch, put, post, get. These are basically aliases for the route decorator that use a different default value for the optional methods argument. I think the rule should probably include those as well.

I've annotated a few more things you should change for the CI checks to pass.