hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

combine two implementations for database-accesses as remote flow sources

Browse Source
This commit is contained in:
Stephan Brandauer
2022-01-13 10:53:58 +01:00
parent 63aaf24063
commit 93507a2d71
1 changed files with 2 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
javascript/ql/lib/semmle/javascript/heuristics/AdditionalSources.qll
View File

@@ -53,23 +53,13 @@ class RemoteServerResponse extends HeuristicSource, RemoteFlowSource {
override string getSourceType() { result = "a response from a remote server" }
}
/**
* The data read from a database.
*/
class DatabaseAccessResultRemoteFlowSource extends HeuristicSource, RemoteFlowSource {
DatabaseAccessResultRemoteFlowSource() { exists(DatabaseAccess dba | this = dba.getAResult()) }
override string getSourceType() { result = "Database query result" }
override predicate isUserControlledObject() { any() }
}
/**
* A remote flow source originating from a database access.
*/
private class RemoteFlowSourceFromDBAccess extends RemoteFlowSource, HeuristicSource {
RemoteFlowSourceFromDBAccess() {
this = ModelOutput::getASourceNode("database-access-result").getAUse()
this = ModelOutput::getASourceNode("database-access-result").getAUse() or
exists(DatabaseAccess dba | this = dba.getAResult())
}
override string getSourceType() { result = "Database access" }