hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

implement TextEncoderStep taint step with globalVarRef predicate

Browse Source
This commit is contained in:
am0o0
2024-07-01 11:43:25 +02:00
parent 65fdb8ccce
commit 60aa711005
1 changed files with 6 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
javascript/ql/lib/semmle/javascript/frameworks/JWT.qll
View File

@@ -168,14 +168,12 @@ private module PassportJwt {
*/
private class TextEncoderStep extends TaintTracking::SharedTaintStep, DataFlow::SharedFlowStep {
override predicate step(DataFlow::Node pred, DataFlow::Node succ) {
exists(DataFlow::CallNode n, DataFlow::NewNode nn |
n.getCalleeName() = "encode" and
nn.flowsTo(n.getReceiver()) and
nn.getCalleeName() = "TextEncoder"
|
pred = n.getArgument(0) and
succ = n
)
exists(DataFlow::CallNode n | n = DataFlow::globalVarRef("TextEncoder").getAnInstantiation().getAMemberCall("encode") |
pred = n.getArgument(0) and
succ = n and
n.getLocation().getFile().getRelativePath().matches("%HardcodedCredentials.js%")
)
}
}