hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to-cast sink's naming

Browse Source 
Signed-off-by: jorgectf <jorgectf@protonmail.com>
This commit is contained in:
jorgectf
2021-04-27 19:24:25 +02:00
parent c0c71c509c
commit 20b532ec5e
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/src/experimental/Security/CWE-730/RegexInjection.ql
View File

@@ -18,12 +18,12 @@ import DataFlow::PathGraph
from
RegexInjectionFlowConfig config, DataFlow::PathNode source, DataFlow::PathNode sink,
RegexInjectionSink castedSink, Attribute methodAttribute
RegexInjectionSink regexInjectionSink, Attribute methodAttribute
where
config.hasFlowPath(source, sink) and
castedSink = sink.getNode() and
methodAttribute = castedSink.getRegexMethod()
regexInjectionSink = sink.getNode() and
methodAttribute = regexInjectionSink.getRegexMethod()
select sink.getNode(), source, sink,
"$@ regular expression is constructed from a $@ and executed by $@.", sink.getNode(), "This",
source.getNode(), "user-provided value", methodAttribute,
castedSink.getRegexModule() + "." + methodAttribute.getName()
regexInjectionSink.getRegexModule() + "." + methodAttribute.getName()