hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-06 15:49:08 +01:00
Code Issues Packages Projects Releases Wiki Activity

support all ClientRequests in js/disabling-certificate-validation

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-04-12 15:06:10 +02:00
parent 63f087a8e9
commit 172d6139e2
3 changed files with 26 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-295/DisablingCertificateValidation.ql
View File

@@ -16,7 +16,7 @@ import javascript
*/
DataFlow::ObjectLiteralNode tlsOptions() {
exists(DataFlow::InvokeNode invk | result.flowsTo(invk.getAnArgument()) |
invk instanceof NodeJSLib::NodeJSClientRequest
invk instanceof ClientRequest
or
invk = DataFlow::moduleMember("https", "Agent").getAnInstantiation()
or