hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix non-monotonic recursion in js/missing-rate-limiting

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-08-31 14:21:46 +02:00
parent 83252e5ba2
commit 28dce6e95a
1 changed files with 1 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll
View File

@@ -29,7 +29,7 @@ private import semmle.javascript.frameworks.ConnectExpressShared::ConnectExpress
/**
* A route handler that should be rate-limited.
*/
abstract class ExpensiveRouteHandler extends HTTP::RouteHandler {
abstract class ExpensiveRouteHandler extends DataFlow::Node {
Express::RouteHandler impl;
ExpensiveRouteHandler() { this = impl }
@@ -42,10 +42,6 @@ abstract class ExpensiveRouteHandler extends HTTP::RouteHandler {
* `referenceLabel` are ignored and should be bound to dummy values.
*/
abstract predicate explain(string explanation, DataFlow::Node reference, string referenceLabel);
override HTTP::HeaderDefinition getAResponseHeader(string name) {
result = impl.getAResponseHeader(name)
}
}
/**