hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to the Global/flow* api

Browse Source
This commit is contained in:
Ed Minnix
2023-03-27 12:26:18 -04:00
parent 106e5e7145
commit 9bfb13b942
3 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/src/Security/CWE/CWE-522/InsecureLdapAuth.ql
View File

@@ -18,8 +18,8 @@ import InsecureLdapUrlFlow::PathGraph
from InsecureLdapUrlFlow::PathNode source, InsecureLdapUrlFlow::PathNode sink
where
InsecureLdapUrlFlow::hasFlowPath(source, sink) and
BasicAuthFlow::hasFlowTo(sink.getNode()) and
not RequiresSslFlow::hasFlowTo(sink.getNode())
InsecureLdapUrlFlow::flowPath(source, sink) and
BasicAuthFlow::flowTo(sink.getNode()) and
not RequiresSslFlow::flowTo(sink.getNode())
select sink.getNode(), source, sink, "Insecure LDAP authentication from $@.", source.getNode(),
"LDAP connection string"