From 42818e94c4bd4cd23ff6114963be7ec91eea4c26 Mon Sep 17 00:00:00 2001 From: Jean Helie Date: Thu, 10 Nov 2022 16:51:40 +0100 Subject: [PATCH] ATM: update query sink mapping --- .../modelbuilding/extraction/ExtractEndpointMapping.ql | 3 +++ 1 file changed, 3 insertions(+) diff --git a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql index 98668ba01fd..2fb6b56d4c0 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql +++ b/javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql @@ -8,6 +8,7 @@ import experimental.adaptivethreatmodeling.SqlInjectionATM as SqlInjectionAtm import experimental.adaptivethreatmodeling.NosqlInjectionATM as NosqlInjectionAtm import experimental.adaptivethreatmodeling.TaintedPathATM as TaintedPathAtm import experimental.adaptivethreatmodeling.XssATM as XssAtm +import experimental.adaptivethreatmodeling.XssThroughDomATM as XssThroughDomAtm import experimental.adaptivethreatmodeling.AdaptiveThreatModeling from string queryName, AtmConfig c, EndpointType e @@ -23,6 +24,8 @@ where c instanceof TaintedPathAtm::Configuration or queryName = "Xss" and c instanceof XssAtm::Configuration + or + queryName = "XssThroughDOM" and c instanceof XssThroughDomAtm::Configuration ) and e = c.getASinkEndpointType() select queryName, e.getEncoding() as label