hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Use API graphs in CryptoJS

Browse Source
This commit is contained in:
Asger F
2023-03-31 12:03:14 +02:00
parent dec1e4dfd6
commit 4a06b81429
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
javascript/ql/lib/semmle/javascript/frameworks/CryptoLibraries.qll
View File

@@ -291,13 +291,13 @@ private module CryptoJS {
* ```
*/
exists(DataFlow::SourceNode mod, DataFlow::PropRead propRead |
mod = DataFlow::moduleImport("crypto-js") and
propRead = mod.getAPropertyRead("algo").getAPropertyRead() and
this = propRead.getAMemberCall("create") and
algorithmName = propRead.getPropertyName() and
not isStrongPasswordHashingAlgorithm(algorithmName)
)
this =
API::moduleImport("crypto-js")
.getMember("algo")
.getMember(algorithmName)
.getMember("create")
.getACall() and
not isStrongPasswordHashingAlgorithm(algorithmName)
}
CryptographicAlgorithm getAlgorithm() { result.matchesName(algorithmName) }