hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

move the XssThroughDom sources into the Customizations file

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-04-20 10:36:50 +02:00
parent ad14bbae90
commit 25708c5091
3 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
javascript/ql/lib/semmle/javascript/security/dataflow/Xss.qll
View File

@@ -170,10 +170,12 @@ deprecated module StoredXss {
import StoredXssCustomizations::StoredXss
}
/** Provides classes and predicates for the XSS through DOM query. */
module XssThroughDom {
/** A data flow source for XSS through DOM vulnerabilities. */
abstract class Source extends Shared::Source { }
/**
* DEPRECATED: Use the `XssThroughDomCustomizations.qll` file instead.
* Provides classes and predicates for the XSS through DOM query.
*/
deprecated module XssThroughDom {
import XssThroughDomCustomizations::XssThroughDom
}
/** Provides classes for customizing the `ExceptionXss` query. */

5
javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll
View File

@@ -9,10 +9,13 @@ import javascript
* Sources for cross-site scripting vulnerabilities through the DOM.
*/
module XssThroughDom {
import Xss::XssThroughDom
private import Xss::Shared as Shared
private import semmle.javascript.dataflow.InferredTypes
private import semmle.javascript.security.dataflow.DomBasedXssCustomizations
/** A data flow source for XSS through DOM vulnerabilities. */
abstract class Source extends Shared::Source { }
/**
* Gets an attribute name that could store user-controlled data.
*

1
javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomQuery.qll
View File

@@ -5,7 +5,6 @@
import javascript
private import semmle.javascript.dataflow.InferredTypes
import Xss::XssThroughDom
private import XssThroughDomCustomizations::XssThroughDom
private import semmle.javascript.security.dataflow.DomBasedXssCustomizations
private import semmle.javascript.security.dataflow.UnsafeJQueryPluginCustomizations::UnsafeJQueryPlugin as UnsafeJQuery