hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Match sanitizer inputs' naming

Browse Source
This commit is contained in:
jorgectf
2021-06-15 16:27:32 +02:00
parent c948970181
commit 6bed8594f2
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/experimental/semmle/python/Concepts.qll
View File

@@ -163,7 +163,7 @@ class NoSQLQuery extends DataFlow::Node {
module NoSQLSanitizer {
abstract class Range extends DataFlow::Node {
abstract DataFlow::Node getSanitizerNode();
abstract DataFlow::Node getAnInput();
}
}
@@ -172,5 +172,5 @@ class NoSQLSanitizer extends DataFlow::Node {
NoSQLSanitizer() { this = range }
DataFlow::Node getSanitizerNode() { result = range.getSanitizerNode() }
DataFlow::Node getAnInput() { result = range.getAnInput() }
}

4
python/ql/src/experimental/semmle/python/frameworks/NoSQL.qll
View File

@@ -166,7 +166,7 @@ private module NoSQL {
API::moduleImport("mongosanitizer").getMember("sanitizer").getMember("sanitize").getACall()
}
override DataFlow::Node getSanitizerNode() { result = this.getArg(0) }
override DataFlow::Node getAnInput() { result = this.getArg(0) }
}
/**
@@ -182,6 +182,6 @@ private module NoSQL {
.getACall()
}
override DataFlow::Node getSanitizerNode() { result = this.getArg(0) }
override DataFlow::Node getAnInput() { result = this.getArg(0) }
}
}

4
python/ql/src/experimental/semmle/python/security/injection/NoSQLInjection.qll
View File

@@ -42,7 +42,7 @@ class RFSToDictConfig extends TaintTracking::Configuration {
override predicate isSink(DataFlow::Node sink) { sink instanceof DataToDictSink }
override predicate isSanitizer(DataFlow::Node sanitizer) {
sanitizer = any(NoSQLSanitizer noSQLSanitizer).getSanitizerNode()
sanitizer = any(NoSQLSanitizer noSQLSanitizer).getAnInput()
}
}
@@ -54,7 +54,7 @@ class FromDataDictToSink extends TaintTracking2::Configuration {
override predicate isSink(DataFlow::Node sink) { sink = any(NoSQLQuery noSQLQuery).getQuery() }
override predicate isSanitizer(DataFlow::Node sanitizer) {
sanitizer = any(NoSQLSanitizer noSQLSanitizer).getSanitizerNode()
sanitizer = any(NoSQLSanitizer noSQLSanitizer).getAnInput()
}
}