mirror of
https://github.com/github/codeql.git
synced 2026-04-28 10:15:14 +02:00
JS: Also materialize labels in ZipSlip
This commit is contained in:
@@ -12,6 +12,15 @@ import javascript
|
||||
module ZipSlip {
|
||||
import ZipSlipCustomizations::ZipSlip
|
||||
|
||||
// Materialize flow labels
|
||||
private class ConcretePosixPath extends TaintedPath::Label::PosixPath {
|
||||
ConcretePosixPath() { this = this }
|
||||
}
|
||||
|
||||
private class ConcreteSplitPath extends TaintedPath::Label::SplitPath {
|
||||
ConcreteSplitPath() { this = this }
|
||||
}
|
||||
|
||||
/** A taint tracking configuration for unsafe archive extraction. */
|
||||
class Configuration extends DataFlow::Configuration {
|
||||
Configuration() { this = "ZipSlip" }
|
||||
|
||||
Reference in New Issue
Block a user