hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-21 06:55:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update model validation

Browse Source
This commit is contained in:
Owen Mansel-Chan
2024-08-08 10:11:25 +01:00
parent 49f3959405
commit 2fe74a8554
1 changed files with 4 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
shared/mad/codeql/mad/ModelValidation.qll
View File

@@ -28,13 +28,13 @@ module KindValidation<KindValidationConfigSig Config> {
// shared
"code-injection", "command-injection", "environment-injection", "file-content-store",
"html-injection", "js-injection", "ldap-injection", "log-injection", "path-injection",
"request-forgery", "sql-injection", "url-redirection",
"request-forgery", "sql-injection", "url-redirection", "xpath-injection",
// Java-only currently, but may be shared in the future
"bean-validation", "fragment-injection", "groovy-injection", "hostname-verification",
"information-leak", "intent-redirection", "jexl-injection", "jndi-injection",
"mvel-injection", "notification", "ognl-injection", "pending-intents",
"response-splitting", "trust-boundary-violation", "template-injection", "url-forward",
"xpath-injection", "xslt-injection",
"xslt-injection",
// JavaScript-only currently, but may be shared in the future
"mongodb.sink", "nosql-injection", "unsafe-deserialization",
// Swift-only currently, but may be shared in the future
@@ -48,13 +48,11 @@ module KindValidation<KindValidationConfigSig Config> {
or
this.matches([
// shared
"credentials-%", "encryption-%", "qltest%", "test-%",
// Java-only currently, but may be shared in the future
"regex-use%",
"credentials-%", "encryption-%", "qltest%", "test-%", "regex-use%",
// Swift-only currently, but may be shared in the future
"%string-%length", "weak-hash-input-%",
// Go-only currently, but may be shared in the future
"request-forgery%"
"request-forgery[%]", "url-redirection[%]"
])
}
}