hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply naming suggestions from code review

Browse Source 
Co-authored-by: Rasmus Wriedt Larsen <rasmuswriedtlarsen@gmail.com>
This commit is contained in:
yoff
2023-09-28 11:47:10 +02:00
committed by GitHub
parent 12dab88ec7
commit 8156fa9a4d
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
python/ql/lib/semmle/python/Concepts.qll
View File

@@ -378,13 +378,13 @@ module SqlExecution {
}
}
/** Provides a class for modeling NoSql execution APIs. */
/** Provides a class for modeling NoSQL execution APIs. */
module NoSqlExecution {
/**
* A data-flow node that executes NoSQL queries.
*
* Extend this class to model new APIs. If you want to refine existing API models,
* extend `NoSQLQuery` instead.
* extend `NoSqlExecution` instead.
*/
abstract class Range extends DataFlow::Node {
/** Gets the argument that specifies the NoSql query to be executed. */
@@ -402,7 +402,7 @@ module NoSqlExecution {
* A data-flow node that executes NoSQL queries.
*
* Extend this class to refine existing API models. If you want to model new APIs,
* extend `NoSQLQuery::Range` instead.
* extend `NoSqlExecution::Range` instead.
*/
class NoSqlExecution extends DataFlow::Node instanceof NoSqlExecution::Range {
/** Gets the argument that specifies the NoSql query to be executed. */

4
python/ql/lib/semmle/python/security/dataflow/NoSQLInjectionQuery.qll
View File

@@ -11,7 +11,7 @@ private import NoSQLInjectionCustomizations::NoSqlInjection as C
/**
* A taint-tracking configuration for detecting NoSQL injection vulnerabilities.
*/
module NoSQLInjectionConfig implements DataFlow::StateConfigSig {
module NoSqlInjectionConfig implements DataFlow::StateConfigSig {
class FlowState = C::FlowState;
predicate isSource(DataFlow::Node source, FlowState state) {
@@ -57,4 +57,4 @@ module NoSQLInjectionConfig implements DataFlow::StateConfigSig {
}
}
module Flow = TaintTracking::GlobalWithState<NoSQLInjectionConfig>;
module NoSqlInjectionFlow = TaintTracking::GlobalWithState<NoSqlInjectionConfig>;

2
python/ql/test/query-tests/Security/CWE-943-NoSqlInjection/DataflowQueryTest.ql
View File

@@ -1,4 +1,4 @@
import python
import experimental.dataflow.TestUtil.DataflowQueryTest
import semmle.python.security.dataflow.NoSQLInjectionQuery
import FromTaintTrackingStateConfig<NoSQLInjectionConfig>
import FromTaintTrackingStateConfig<NoSqlInjectionConfig>