hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Extend Sendgrid setters

Browse Source
This commit is contained in:
jorgectf
2021-06-23 20:56:48 +02:00
parent 9563faf918
commit 5e8f9959ef
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
python/ql/src/experimental/semmle/python/frameworks/Sendgrid.qll
View File

@@ -75,6 +75,8 @@ private module Sendgrid {
override DataFlow::Node getHtmlBody() {
result in [sendgridMailCall().getArg(4), sendgridMailCall().getArgByName("html_content")]
or
result = sendgridMailInstance().getMember("set_html").getACall().getArg(0)
or
exists(DataFlow::CallCfgNode contentCall, StrConst mime |
contentCall = sendgridMailHelper().getMember("Content").getACall() and
mime.getText() = "text/html" and
@@ -113,7 +115,7 @@ private module Sendgrid {
or
result = sendgridMailHelper().getMember("Email").getACall().getArg(0)
or
result = sendgridMailInstance().getMember("from_email").getACall().getArg(0)
result = sendgridMailInstance().getMember(["from_email", "set_from"]).getACall().getArg(0)
or
exists(DataFlow::AttrWrite fromWrite |
fromWrite.getObject().getALocalSource() = sendgridMailCall() and
@@ -125,7 +127,7 @@ private module Sendgrid {
override DataFlow::Node getSubject() {
result in [sendgridMailCall().getArg(2), sendgridMailCall().getArgByName("subject")]
or
result = sendgridMailInstance().getMember("subject").getACall().getArg(0)
result = sendgridMailInstance().getMember(["subject", "set_subject"]).getACall().getArg(0)
or
exists(DataFlow::AttrWrite subjectWrite |
subjectWrite.getObject().getALocalSource() = sendgridMailCall() and