hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update LdapjsSearchOptions

Browse Source
This commit is contained in:
ubuntu
2020-09-01 22:28:58 +02:00
parent e2e55455c1
commit 15562e4814
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
View File

@@ -33,9 +33,17 @@ module Ldapjs {
* Gets a data flow node for the client `search` options.
*/
class LdapjsSearchOptions extends DataFlow::SourceNode {
DataFlow::CallNode queryCall;
LdapjsSearchOptions() {
this = any(LdapjsClient client).getAMemberCall("search").getArgument(1).getALocalSource()
queryCall = any(LdapjsClient client).getAMemberCall("search") and
this = queryCall.getArgument(1).getALocalSource()
}
/**
* Gets the LDAP query call that these options are used in.
*/
DataFlow::InvokeNode getQueryCall() { result = queryCall }
}
/**