JS: Also materialize labels in ZipSlip

This commit is contained in:
Asger Feldthaus
2020-10-15 14:04:11 +01:00
parent 4337c5adaf
commit 583f3d7fd9

View File

@@ -12,6 +12,15 @@ import javascript
module ZipSlip {
import ZipSlipCustomizations::ZipSlip
// Materialize flow labels
private class ConcretePosixPath extends TaintedPath::Label::PosixPath {
ConcretePosixPath() { this = this }
}
private class ConcreteSplitPath extends TaintedPath::Label::SplitPath {
ConcreteSplitPath() { this = this }
}
/** A taint tracking configuration for unsafe archive extraction. */
class Configuration extends DataFlow::Configuration {
Configuration() { this = "ZipSlip" }