Update javascript/ql/src/experimental/Security/CWE-090/LdapInjectionCustomizations.qll

Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Alessio Della Libera
2020-09-02 15:22:23 +02:00
committed by GitHub
parent 26046a4847
commit 548cb65a64

View File

@@ -38,8 +38,11 @@ module LdapInjection {
/**
* An LDAP filter for an API call that executes an operation against the LDAP server.
*/
class LdapjsSearchFilterAsSink extends Sink, LdapjsSearchFilter {
override DataFlow::InvokeNode getQueryCallSink() {
class LdapjsSearchFilterAsSink extends Sink {
LdapjsSearchFilterAsSink() {
this instanceof LdapjsSearchFilter
}
override DataFlow::InvokeNode getQueryCall() {
result = this.(LdapjsSearchFilter).getQueryCall()
}
}