hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 06:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

simplify expressions

Browse Source
This commit is contained in:
edvraa
2021-05-10 17:20:47 +03:00
committed by Owen Mansel-Chan
parent f537c479c9
commit 4eb4787692
1 changed files with 3 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ql/src/experimental/CWE-1004/CookieWithoutHttpOnly.ql
View File

@@ -20,9 +20,7 @@ predicate isNetHttpCookieFlow(DataFlow::PathNode source, DataFlow::PathNode sink
exists(DataFlow::PathNode cookieCreate, DataFlow::PathNode setCookieSink |
exists(NetHttpCookieTrackingConfiguration cfg | cfg.hasFlowPath(cookieCreate, setCookieSink)) and
(
not exists(DataFlow::Node rhs |
rhs = getValueForFieldWrite(cookieCreate.getNode().asExpr(), "HttpOnly")
) and
not exists(getValueForFieldWrite(cookieCreate.getNode().asExpr(), "HttpOnly")) and
source = cookieCreate and
sink = setCookieSink
or
@@ -36,14 +34,12 @@ predicate isNetHttpCookieFlow(DataFlow::PathNode source, DataFlow::PathNode sink
}
predicate isGinContextCookieFlow(DataFlow::PathNode source, DataFlow::PathNode sink) {
exists(BoolToGinSetCookieTrackingConfiguration cfg | cfg.hasFlowPath(source, sink))
any(BoolToGinSetCookieTrackingConfiguration cfg).hasFlowPath(source, sink)
}
predicate isGorillaSessionsCookieFlow(DataFlow::PathNode source, DataFlow::PathNode sink) {
exists(DataFlow::PathNode cookieStoreCreate, DataFlow::PathNode sessionSave |
exists(GorillaCookieStoreSaveTrackingConfiguration cfg |
cfg.hasFlowPath(cookieStoreCreate, sessionSave)
) and
any(GorillaCookieStoreSaveTrackingConfiguration cfg).hasFlowPath(cookieStoreCreate, sessionSave) and
(
not exists(GorillaSessionOptionsTrackingConfiguration cfg, DataFlow::PathNode sessionSave2 |
sessionSave2.getNode() = sessionSave.getNode() and