mirror of
https://github.com/github/codeql.git
synced 2026-04-28 10:15:14 +02:00
rename verifies() to verifiesSignature()
This commit is contained in:
@@ -1311,7 +1311,7 @@ class JwtDecoding extends DataFlow::Node instanceof JwtDecoding::Range {
|
||||
DataFlow::Node getOptions() { result = super.getOptions() }
|
||||
|
||||
/** Checks if the signature gets verified while decoding. */
|
||||
predicate verifies() { super.verifies() }
|
||||
predicate verifiesSignature() { super.verifiesSignature() }
|
||||
}
|
||||
|
||||
/** Provides a class for modeling new Jwt token encoding APIs. */
|
||||
@@ -1336,6 +1336,6 @@ module JwtDecoding {
|
||||
abstract DataFlow::Node getOptions();
|
||||
|
||||
/** Checks if the signature gets verified while decoding. */
|
||||
abstract predicate verifies();
|
||||
abstract predicate verifiesSignature();
|
||||
}
|
||||
}
|
||||
|
||||
@@ -45,7 +45,7 @@ module Jwt {
|
||||
|
||||
override DataFlow::Node getOptions() { result = this.getArgument(3) }
|
||||
|
||||
override predicate verifies() {
|
||||
override predicate verifiesSignature() {
|
||||
not this.getArgument(2).getConstantValue().isBoolean(false) and
|
||||
not this.getAlgorithm().getConstantValue().isStringlikeValue("none")
|
||||
or
|
||||
|
||||
@@ -12,5 +12,5 @@
|
||||
private import codeql.ruby.Concepts
|
||||
|
||||
from JwtDecoding jwtDecoding
|
||||
where not jwtDecoding.verifies()
|
||||
where not jwtDecoding.verifiesSignature()
|
||||
select jwtDecoding.getPayload(), "is not verified with a cryptographic secret or public key."
|
||||
|
||||
Reference in New Issue
Block a user