hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: renames for rb/xpath-injection

Browse Source
This commit is contained in:
Alex Ford
2023-09-03 16:01:40 +01:00
parent 42cd58695d
commit 77f3a70376
2 changed files with 22 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ruby/ql/src/experimental/xpath-injection/XpathInjection.ql
View File

@@ -13,9 +13,9 @@
import codeql.ruby.DataFlow
import codeql.ruby.security.XpathInjectionQuery
import XpathInjection::PathGraph
import XpathInjectionFlow::PathGraph
from XpathInjection::PathNode source, XpathInjection::PathNode sink
where XpathInjection::flowPath(source, sink)
from XpathInjectionFlow::PathNode source, XpathInjectionFlow::PathNode sink
where XpathInjectionFlow::flowPath(source, sink)
select sink.getNode(), source, sink, "XPath expression depends on a $@.", source.getNode(),
"user-provided value"