hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 09:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Convert EchoContextBinder to MaD

Browse Source
This commit is contained in:
Owen Mansel-Chan
2024-06-23 07:29:10 +01:00
parent 3fc598dbe9
commit 2ec64a9ca8
2 changed files with 1 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
go/ql/lib/ext/github.com.labstack.echo.model.yml
View File

@@ -10,6 +10,7 @@ extensions:
pack: codeql/go-all pack: codeql/go-all
extensible: sourceModel extensible: sourceModel
data: data:
- ["github.com/labstack/echo", "Context", True, "Bind", "", "", "Argument[0]", "remote", "manual"]
- ["github.com/labstack/echo", "Context", True, "Param", "", "", "ReturnValue[0]", "remote", "manual"] - ["github.com/labstack/echo", "Context", True, "Param", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/labstack/echo", "Context", True, "ParamValues", "", "", "ReturnValue[0]", "remote", "manual"] - ["github.com/labstack/echo", "Context", True, "ParamValues", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/labstack/echo", "Context", True, "QueryParam", "", "", "ReturnValue[0]", "remote", "manual"] - ["github.com/labstack/echo", "Context", True, "QueryParam", "", "", "ReturnValue[0]", "remote", "manual"]

13
go/ql/lib/semmle/go/frameworks/Echo.qll
View File

@@ -22,19 +22,6 @@ private module Echo {
} }
} }
/**
* A call to a method on `Context` struct that unmarshals data into a target.
*/
private class EchoContextBinder extends RemoteFlowSource::Range {
EchoContextBinder() {
exists(DataFlow::MethodCallNode call |
call.getTarget().hasQualifiedName(packagePath(), "Context", "Bind")
|
this = FunctionOutput::parameter(0).getExitNode(call)
)
}
}
/** /**
* `echo.Context` methods which set the content-type to `text/html` and write a result in one operation. * `echo.Context` methods which set the content-type to `text/html` and write a result in one operation.
*/ */