hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Refactor sendgridApiClient and sendgridApiSendCall

Browse Source 
Co-authored-by: yoff <lerchedahl@gmail.com>
This commit is contained in:
jorgectf
2022-03-08 18:24:38 +01:00
parent 3159d8e211
commit 6722671541
1 changed files with 12 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
python/ql/src/experimental/semmle/python/frameworks/Sendgrid.qll
View File

@@ -24,23 +24,21 @@ private module Sendgrid {
private DataFlow::CallCfgNode sendgridMailCall() { result = sendgridMailInstance().getACall() }
/** Gets a reference to a `SendGridAPIClient` instance. */
private DataFlow::LocalSourceNode sendgridApiClient(DataFlow::TypeTracker t) {
t.start() and
result.(DataFlow::AttrRead).getObject*().getALocalSource() =
sendgrid().getMember("SendGridAPIClient").getReturn().getAUse()
or
exists(DataFlow::TypeTracker t2 | result = sendgridApiClient(t2).track(t2, t))
}
/** Gets a reference to a `SendGridAPIClient` instance use. */
private DataFlow::Node sendgridApiClient() {
sendgridApiClient(DataFlow::TypeTracker::end()).flowsTo(result)
private API::Node sendgridApiClient() {
result = sendgrid().getMember("SendGridAPIClient").getReturn()
}
/** Gets a reference to a `SendGridAPIClient` instance call with `send` or `post`. */
private DataFlow::Node sendgridApiSendCall() {
result = sendgridApiClient() and
result.(DataFlow::AttrRead).getAttributeName() in ["send", "post"]
private DataFlow::CallCfgNode sendgridApiSendCall() {
result = sendgridApiClient().getMember("send").getACall()
or
result =
sendgridApiClient()
.getMember("client")
.getMember("mail")
.getMember("send")
.getMember("post")
.getACall()
}
private DataFlow::Node sendgridContent(DataFlow::CallCfgNode contentCall, string mime) {