hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 19:55:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll

Browse Source 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Alessio Della Libera
2020-09-01 21:00:49 +02:00
committed by GitHub
parent 78ebcee570
commit 8f00acd4e2
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
View File

@@ -65,7 +65,14 @@ module Ldapjs {
* A distinguished name (DN) used in a Client API call against the LDAP server.
*/
class LdapjsDNArgument extends DataFlow::Node {
LdapjsDNArgument() { this = any(LdapjsClientAPICall clientAPIcall).getArgument(0) }
LdapjsClientAPICall queryCall;
LdapjsDNArgument() { this = queryCall.getArgument(0) }
/**
* Gets the LDAP query call that this DN is used in.
*/
DataFlow::InvokeNode getQueryCall() { result = queryCall }
}
/**