hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll

Browse Source 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Alessio Della Libera
2020-09-01 21:00:38 +02:00
committed by GitHub
parent b86b9ba510
commit 78ebcee570
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
View File

@@ -42,9 +42,14 @@ module Ldapjs {
* A filter used in a `search` operation against the LDAP server.
*/
class LdapjsSearchFilter extends DataFlow::Node {
LdapjsSearchFilter() {
this = any(LdapjsSearchOptions options).getAPropertyWrite("filter").getRhs()
}
LdapjsSearchOptions options;
LdapjsSearchFilter() { this = options.getAPropertyWrite("filter").getRhs() }
/**
* Gets the LDAP query call that this filter is used in.
*/
DataFlow::InvokeNode getQueryCall() { result = options.getQueryCall() }
}
/**