hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 16:25:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Convert Fasthttp::Request::RemoteFlowSource to MaD

Browse Source
This commit is contained in:
Owen Mansel-Chan
2024-06-23 14:40:57 +01:00
parent c3169d258f
commit 729069e3d9
2 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
go/ql/lib/ext/github.com.valyala.fasthttp.model.yml
View File

@@ -25,3 +25,15 @@ extensions:
- ["github.com/valyala/fasthttp", "URI", True, "PathOriginal", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/valyala/fasthttp", "URI", True, "QueryString", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/valyala/fasthttp", "URI", True, "String", "", "", "ReturnValue[0]", "remote", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "Body", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyGunzip", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyInflate", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyStream", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyUnbrotli", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "BodyUncompressed", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ContinueReadBody", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ContinueReadBodyStream", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "Host", "", "", "ReturnValue[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ReadBody", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "ReadLimitBody", "", "", "Argument[0]", "request", "manual"]
- ["github.com/valyala/fasthttp", "Request", True, "RequestURI", "", "", "ReturnValue[0]", "request", "manual"]

6
go/ql/lib/semmle/go/frameworks/Fasthttp.qll
View File

@@ -405,14 +405,16 @@ module Fasthttp {
*/
module Request {
/**
* DEPRECATED: Use `RemoteFlowSource` instead.
* DEPRECATED: Use `RemoteFlowSource::range` instead.
*/
deprecated class UntrustedFlowSource = RemoteFlowSource;
/**
* DEPRECATED: Use `RemoteFlowSource::range` instead.
*
* The methods as Remote user controllable source which can be many part of request.
*/
class RemoteFlowSource extends RemoteFlowSource::Range instanceof DataFlow::Node {
deprecated class RemoteFlowSource extends RemoteFlowSource::Range instanceof DataFlow::Node {
RemoteFlowSource() {
exists(Method m |
m.hasQualifiedName(packagePath(), "Request",