hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python revert .getNode() to .getSink()/.getSource() to keep expected test output the same.

Browse Source
This commit is contained in:
Mark Shannon
2019-03-06 17:28:25 +00:00
parent f8c43ca40b
commit 35e82dca68
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/Security/CWE-089/SqlInjection.ql
View File

@@ -26,7 +26,7 @@ class SQLInjectionConfiguration extends TaintTracking::Configuration {
SQLInjectionConfiguration() { this = "SQL injection configuration" }
override predicate isSource(TaintTracking::Source source) { source.isSourceOf(any(UntrustedStringKind u)) }
override predicate isSource(TaintTracking::Source source) { source instanceof HttpRequestTaintSource }
override predicate isSink(TaintTracking::Sink sink) { sink instanceof SqlInjectionSink }
@@ -34,4 +34,4 @@ class SQLInjectionConfiguration extends TaintTracking::Configuration {
from SQLInjectionConfiguration config, TaintedPathSource src, TaintedPathSink sink
where config.hasFlowPath(src, sink)
select sink.getNode(), src, sink, "This SQL query depends on $@.", src.getNode(), "a user-provided value"
select sink.getSink(), src, sink, "This SQL query depends on $@.", src.getSource(), "a user-provided value"