mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
Go/SSRF
go/ql/src/experimental/CWE-918/SSRF.ql
This commit is contained in:
@@ -33,9 +33,9 @@ module ServerSideRequestForgery {
|
|||||||
|
|
||||||
predicate observeDiffInformedIncrementalMode() { any() }
|
predicate observeDiffInformedIncrementalMode() { any() }
|
||||||
|
|
||||||
Location getASelectedSourceLocation(DataFlow::Node source) { none() }
|
|
||||||
|
|
||||||
Location getASelectedSinkLocation(DataFlow::Node sink) {
|
Location getASelectedSinkLocation(DataFlow::Node sink) {
|
||||||
|
result = sink.(Sink).getLocation()
|
||||||
|
or
|
||||||
result = sink.(Sink).getARequest().getLocation()
|
result = sink.(Sink).getARequest().getLocation()
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user