hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS/Python/Ruby: use 'SharedModelValidation' file

Browse Source
This commit is contained in:
Jami Cogswell
2023-05-30 19:04:15 -04:00
parent ddb5d92ef8
commit 0ab1848b70
3 changed files with 39 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
python/ql/lib/semmle/python/frameworks/data/internal/ApiGraphModels.qll
View File

@@ -653,22 +653,26 @@ module ModelOutput {
import Cached
import Specific::ModelOutputSpecific
private import SharedModelValidation
private string getInvalidModelKind() {
exists(string kind | summaryModel(_, _, _, _, kind) |
not kind instanceof ValidSummaryKind and
result = "Invalid kind \"" + kind + "\" in summary model."
)
or
exists(string kind | sinkModel(_, _, kind) |
not kind =
[
"request-forgery", "jndi-injection", "ldap-injection", "sql-injection", "log-injection",
"mvel-injection", "xpath-injection", "groovy-injection", "html-injection", "js-injection",
"ognl-injection", "intent-redirection", "pending-intents", "url-redirection",
"path-injection", "file-content-store", "hostname-verification", "response-splitting",
"information-leak", "xslt-injection", "jexl-injection", "bean-validation",
"template-injection", "fragment-injection", "command-injection"
] and
not kind instanceof ValidSinkKind and
not kind.matches("credentials-%") and
not kind.matches("test-%") and
result = "Invalid kind \"" + kind + "\" in sink model."
)
or
exists(string kind | sourceModel(_, _, kind) |
not kind instanceof ValidSourceKind and
not kind.matches("qltest%") and
result = "Invalid kind \"" + kind + "\" in source model."
)
}
/**