mirror of
https://github.com/github/codeql.git
synced 2026-04-25 00:35:20 +02:00
JS: A few more deprecation updates
This commit is contained in:
@@ -14,9 +14,11 @@ module BuildArtifactLeak {
|
||||
*/
|
||||
abstract class Sink extends DataFlow::Node {
|
||||
/**
|
||||
* DEPRECATED. This query no longer uses flow state.
|
||||
*
|
||||
* Gets a data-flow label that leaks information for this sink.
|
||||
*/
|
||||
DataFlow::FlowLabel getLabel() { result.isTaint() }
|
||||
deprecated DataFlow::FlowLabel getLabel() { result.isTaint() }
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
@@ -88,7 +88,7 @@ module InsecureDownload {
|
||||
/**
|
||||
* Flow-labels for reasoning about download of sensitive file through insecure connection.
|
||||
*/
|
||||
module Label {
|
||||
deprecated module Label {
|
||||
/**
|
||||
* A flow-label for file URLs that are both sensitive and downloaded over an insecure connection.
|
||||
*/
|
||||
|
||||
@@ -24,16 +24,20 @@ module PostMessageStar {
|
||||
abstract class Sanitizer extends DataFlow::Node { }
|
||||
|
||||
/**
|
||||
* DEPRECATED. This query no longer uses flow state.
|
||||
*
|
||||
* A flow label representing an object with at least one tainted property.
|
||||
*/
|
||||
abstract class PartiallyTaintedObject extends DataFlow::FlowLabel {
|
||||
abstract deprecated class PartiallyTaintedObject extends DataFlow::FlowLabel {
|
||||
PartiallyTaintedObject() { this = "partially tainted object" }
|
||||
}
|
||||
|
||||
/**
|
||||
* DEPRECATED. This query no longer uses flow state.
|
||||
*
|
||||
* Gets either a standard flow label or the partial-taint label.
|
||||
*/
|
||||
DataFlow::FlowLabel anyLabel() {
|
||||
deprecated DataFlow::FlowLabel anyLabel() {
|
||||
result.isDataOrTaint() or result instanceof PartiallyTaintedObject
|
||||
}
|
||||
|
||||
|
||||
@@ -9,7 +9,6 @@
|
||||
|
||||
import javascript
|
||||
import PropertyInjectionShared
|
||||
private import DataFlow::FlowLabel
|
||||
import UnsafeDynamicMethodAccessCustomizations::UnsafeDynamicMethodAccess
|
||||
private import UnsafeDynamicMethodAccessCustomizations::UnsafeDynamicMethodAccess as UnsafeDynamicMethodAccess
|
||||
|
||||
|
||||
@@ -9,8 +9,6 @@ private import semmle.javascript.dataflow.InferredTypes
|
||||
import semmle.javascript.security.dataflow.DomBasedXssCustomizations
|
||||
|
||||
module UnsafeJQueryPlugin {
|
||||
private import DataFlow::FlowLabel
|
||||
|
||||
/**
|
||||
* A data flow source for unsafe jQuery plugins.
|
||||
*/
|
||||
|
||||
Reference in New Issue
Block a user