hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

revert SqlInjection.ql changes

Browse Source
This commit is contained in:
amammad
2023-09-29 01:35:29 +10:00
parent 58f4cd77dc
commit 97c27ac11b
2 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/lib/semmle/javascript/security/dataflow/SqlInjectionQuery.qll
View File

@@ -9,7 +9,6 @@
import javascript
import SqlInjectionCustomizations::SqlInjection
import semmle.javascript.frameworks.TypeORM
/**
* A taint-tracking configuration for reasoning about string based query injection vulnerabilities.
@@ -19,7 +18,7 @@ class Configuration extends TaintTracking::Configuration {
override predicate isSource(DataFlow::Node source) { source instanceof Source }
override predicate isSink(DataFlow::Node sink) { sink instanceof TypeOrm::QueryString }
override predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
override predicate isSanitizer(DataFlow::Node node) {
super.isSanitizer(node) or

4
javascript/ql/src/Security/CWE-089/SqlInjection.ql
View File

@@ -22,8 +22,8 @@ from DataFlow::Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode
where
(
cfg instanceof SqlInjection::Configuration and type = "string"
// or
// cfg instanceof NosqlInjection::Configuration and type = "object"
or
cfg instanceof NosqlInjection::Configuration and type = "object"
) and
cfg.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "This query " + type + " depends on a $@.", source.getNode(),