hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 23:02:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

Remove attrs feature

Browse Source
This commit is contained in:
jorgectf
2021-03-31 22:26:08 +02:00
parent 8faafb6961
commit 4328ff3981
4 changed files with 3 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
python/ql/src/experimental/Security/CWE-090/LDAPInjection.ql
View File

@@ -19,7 +19,6 @@ from
LDAPInjectionSink castedSink
where
config.hasFlowPath(source, sink) and
castedSink.getLDAPNode() = sink.getNode() //and
// if exists(castedSink.getAttrs()) then
castedSink.getLDAPNode() = sink.getNode()
select sink.getNode(), source, sink, "$@ LDAP query executes $@ as a $@.", castedSink, "This",
source.getNode(), "a user-provided value", castedSink.getLDAPNode(), castedSink.getLDAPPart() //, castedSink.getAttrs(), "probably leaking this attribute(s)"
source.getNode(), "a user-provided value", castedSink.getLDAPNode(), castedSink.getLDAPPart()