mirror of
https://github.com/github/codeql.git
synced 2026-04-29 18:55:14 +02:00
Add check for mongoengine raw queries
After initial research on our end, we believe that the only vulnerability within the objects() method is passing a query into the __raw__ keyword argument. More info can be found below: http://docs.mongoengine.org/guide/querying.html?highlight=inc__#raw-queries
This commit is contained in:
@@ -63,7 +63,7 @@ private module NoSQL {
|
||||
.getACall()
|
||||
}
|
||||
|
||||
override DataFlow::Node getQueryNode() { result = this.getArg(0) }
|
||||
override DataFlow::Node getQueryNode() { result = this.getArgByName("__raw__") }
|
||||
}
|
||||
|
||||
private class MongoSanitizerCall extends DataFlow::CallCfgNode, NoSQLSanitizer::Range {
|
||||
|
||||
Reference in New Issue
Block a user