mirror of
https://github.com/github/codeql.git
synced 2025-12-16 08:43:11 +01:00
Go/SSRF
go/ql/src/experimental/CWE-918/SSRF.ql
This commit is contained in:
@@ -33,9 +33,9 @@ module ServerSideRequestForgery {
|
||||
|
||||
predicate observeDiffInformedIncrementalMode() { any() }
|
||||
|
||||
Location getASelectedSourceLocation(DataFlow::Node source) { none() }
|
||||
|
||||
Location getASelectedSinkLocation(DataFlow::Node sink) {
|
||||
result = sink.(Sink).getLocation()
|
||||
or
|
||||
result = sink.(Sink).getARequest().getLocation()
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user