hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-22 23:35:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: add CookieSecurityConfigurationSetting concept

Browse Source
This commit is contained in:
Alex Ford
2021-12-05 23:13:09 +00:00
parent b80a84c156
commit 8a3d1fe174
1 changed files with 31 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
ruby/ql/lib/codeql/ruby/Concepts.qll
View File

@@ -644,3 +644,34 @@ module Path {
abstract class Range extends DataFlow::Node { }
}
}
/**
* A data-flow node that may configure behaviour relating to cookie security.
*
* Extend this class to refine existing API models. If you want to model new APIs,
* extend `CookieSecurityConfigurationSetting::Range` instead.
*/
class CookieSecurityConfigurationSetting extends DataFlow::Node instanceof CookieSecurityConfigurationSetting::Range {
/**
* Gets a description of how this cookie setting may weaken application security.
* This predicate has no results if the setting is considered to be safe.
*/
string getSecurityWarningMessage() { result = super.getSecurityWarningMessage() }
}
/** Provides a class for modeling new cookie security setting APIs. */
module CookieSecurityConfigurationSetting {
/**
* A data-flow node that may configure behaviour relating to cookie security.
*
* Extend this class to model new APIs. If you want to refine existing API models,
* extend `CookieSecurityConfigurationSetting` instead.
*/
abstract class Range extends DataFlow::Node {
/**
* Gets a description of how this cookie setting may weaken application security.
* This predicate has no results if the setting is considered to be safe.
*/
abstract string getSecurityWarningMessage();
}
}