hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix naming of ZipSlip configuration

Browse Source
This commit is contained in:
Ed Minnix
2023-03-20 07:55:23 -04:00
parent 60a4a79537
commit 84fd5f7ee0
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/Security/CWE/CWE-022/ZipSlip.ql
View File

@@ -34,7 +34,7 @@ class ArchiveEntryNameMethod extends Method {
}
}
module ZipSlipConfiguration implements DataFlow::ConfigSig {
module ZipSlipConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node source) {
source.asExpr().(MethodAccess).getMethod() instanceof ArchiveEntryNameMethod
}
@@ -44,7 +44,7 @@ module ZipSlipConfiguration implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) { node instanceof PathInjectionSanitizer }
}
module ZipSlipFlow = TaintTracking::Make<ZipSlipConfiguration>;
module ZipSlipFlow = TaintTracking::Make<ZipSlipConfig>;
import ZipSlipFlow::PathGraph