hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 22:32:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Use CallNode

Browse Source
This commit is contained in:
edvraa
2021-05-13 14:41:13 +03:00
committed by Owen Mansel-Chan
parent d06f4ca21e
commit 3ac1b4ba0b
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ql/src/experimental/CWE-1004/AuthCookie.qll
View File

@@ -165,10 +165,10 @@ class GorillaCookieStoreSaveTrackingConfiguration extends DataFlow::Configuratio
}
override predicate isSource(DataFlow::Node source) {
exists(CallExpr c |
source.asExpr() = c and
c.getTarget().hasQualifiedName("github.com/gorilla/sessions", "NewCookieStore")
)
source
.(DataFlow::CallNode)
.getTarget()
.hasQualifiedName("github.com/gorilla/sessions", "NewCookieStore")
}
override predicate isSink(DataFlow::Node sink) { sink instanceof GorillaSessionSaveSink }