hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Refactor to path query

Browse Source
This commit is contained in:
Tony Torralba
2021-08-04 13:05:18 +02:00
parent b586f3ec9c
commit 452fd9a8e3
3 changed files with 13 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql
View File

@@ -1,8 +1,9 @@
/**
* @name Missing JWT signature check
* @description Failing to check the JWT signature may allow an attacker to forge their own tokens.
* @kind problem
* @kind path-problem
* @problem.severity error
* @security-severity 7.8
* @precision high
* @id java/missing-jwt-signature-check
* @tags security
@@ -11,8 +12,9 @@
import java
import semmle.code.java.security.MissingJWTSignatureCheckQuery
import DataFlow::PathGraph
from JwtParserWithInsecureParseSink sink, JwtParserWithSigningKeyExpr parserExpr
where sink.asExpr() = parserExpr
select sink.getParseMethodAccess(), "A signing key is set $@, but the signature is not verified.",
parserExpr.getSigningMethodAccess(), "here"
from DataFlow::PathNode source, DataFlow::PathNode sink, MissingJwtSignatureCheckConf conf
where conf.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "A signing key is set $@, but the signature is not verified.",
source.getNode(), "here"