hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rename classes

Browse Source
This commit is contained in:
Your Name
2021-04-05 14:41:08 -04:00
parent be9a3a95b1
commit 80216f6974
1 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
python/ql/src/experimental/semmle/python/security/injection/NoSQLInjection.qll
View File

@@ -27,32 +27,30 @@ class UltraJsonLoadsCall extends DataFlow::CallCfgNode {
DataFlow::Node getLoadNode() { result = this.getArg(0) }
}
// better name?
class JSONRelatedSink extends DataFlow::Node {
JSONRelatedSink() {
class DataToDictSink extends DataFlow::Node {
DataToDictSink() {
this = any(JsonLoadsCall jsonLoads).getLoadNode() or
this = any(XmlToDictParseCall jsonLoads).getParseNode() or
this = any(UltraJsonLoadsCall jsonLoads).getLoadNode()
}
}
class RFStoJSON extends TaintTracking::Configuration {
RFStoJSON() { this = "RFStoJSON" }
class RFSToDictConfig extends TaintTracking::Configuration {
RFSToDictConfig() { this = "RFSToDictConfig" }
override predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
override predicate isSink(DataFlow::Node sink) { sink instanceof JSONRelatedSink }
override predicate isSink(DataFlow::Node sink) { sink instanceof DataToDictSink }
override predicate isSanitizer(DataFlow::Node sanitizer) {
sanitizer = any(NoSQLSanitizer noSQLSanitizer).getSanitizerNode()
}
}
// better name?
class FromJSONtoSink extends TaintTracking2::Configuration {
FromJSONtoSink() { this = "FromJSONtoSink" }
class FromDataDictToSink extends TaintTracking2::Configuration {
FromDataDictToSink() { this = "FromDataDictToSink" }
override predicate isSource(DataFlow::Node source) { source instanceof JSONRelatedSink }
override predicate isSource(DataFlow::Node source) { source instanceof DataToDictSink }
override predicate isSink(DataFlow::Node sink) {
sink = any(NoSQLQuery noSQLQuery).getQueryNode()
@@ -65,7 +63,8 @@ class FromJSONtoSink extends TaintTracking2::Configuration {
predicate noSQLInjectionFlow(CustomPathNode source, CustomPathNode sink) {
exists(
RFStoJSON config, DataFlow::PathNode mid1, DataFlow2::PathNode mid2, FromJSONtoSink config2
RFSToDictConfig config, DataFlow::PathNode mid1, DataFlow2::PathNode mid2,
FromDataDictToSink config2
|
config.hasFlowPath(source.asNode1(), mid1) and
config2.hasFlowPath(mid2, sink.asNode2()) and