hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rename LdapjsDN to LdapjsDNArgument and add it as Sink

Browse Source
This commit is contained in:
ubuntu
2020-08-27 00:43:38 +02:00
parent 7d36b3b4d2
commit 94bd9c6d3e
2 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
javascript/ql/src/experimental/Security/CWE-090/LdapInjectionCustomizations.qll
View File

@@ -34,7 +34,10 @@ module LdapInjection {
* An LDAP filter for an API call that executes an operation against the LDAP server.
*/
class LdapjsSink extends Sink {
LdapjsSink() { this instanceof LdapjsSearchFilter }
LdapjsSink() {
this instanceof LdapjsSearchFilter or
this instanceof LdapjsDNArgument
}
}
/**

7
javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
View File

@@ -46,8 +46,7 @@ module Ldapjs {
*/
class LdapjsSearchFilter extends DataFlow::Node {
LdapjsSearchFilter() {
this =
any(LdapjsSearchOptions options).getAPropertyWrite("filter").getRhs()
this = any(LdapjsSearchOptions options).getAPropertyWrite("filter").getRhs()
}
}
@@ -63,8 +62,8 @@ module Ldapjs {
/**
* A distinguished name (DN) used in a Client API call against the LDAP server.
*/
class LdapjsDN extends DataFlow::Node {
LdapjsDN() { this = any(LdapjsClientAPICall clientAPIcall).getArgument(0) }
class LdapjsDNArgument extends DataFlow::Node {
LdapjsDNArgument() { this = any(LdapjsClientAPICall clientAPIcall).getArgument(0) }
}
/**