Swift: Accept cross-language standardized CSV sink label.

This commit is contained in:
Geoffrey White
2023-05-10 17:20:24 +01:00
parent c2a3f37502
commit a3c8515629
4 changed files with 18 additions and 4 deletions

View File

@@ -26,7 +26,11 @@ class CleartextLoggingAdditionalFlowStep extends Unit {
* A sink defined in a CSV model.
*/
private class DefaultCleartextLoggingSink extends CleartextLoggingSink {
DefaultCleartextLoggingSink() { sinkNode(this, "logging") }
DefaultCleartextLoggingSink() {
sinkNode(this, "log-injection")
or
sinkNode(this, "logging") // deprecated label
}
}
/**

View File

@@ -151,5 +151,9 @@ private class GrdbDefaultSqlInjectionSink extends SqlInjectionSink {
* A sink defined in a CSV model.
*/
private class DefaultSqlInjectionSink extends SqlInjectionSink {
DefaultSqlInjectionSink() { sinkNode(this, "sql") }
DefaultSqlInjectionSink() {
sinkNode(this, "sql-injection")
or
sinkNode(this, "sql") // deprecated label
}
}

View File

@@ -39,6 +39,8 @@ private class DefaultUncontrolledFormatStringSink extends UncontrolledFormatStri
this.asExpr() = any(FormattingFunctionCall fc).getFormat()
or
// a sink defined in a CSV model.
sinkNode(this, "uncontrolled-format-string")
sinkNode(this, "format-string")
or
sinkNode(this, "uncontrolled-format-string") // deprecated label
}
}

View File

@@ -144,5 +144,9 @@ private class DefaultUnsafeJsEvalAdditionalFlowStep extends UnsafeJsEvalAddition
* A sink defined in a CSV model.
*/
private class DefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
DefaultUnsafeJsEvalSink() { sinkNode(this, "js-eval") }
DefaultUnsafeJsEvalSink() {
sinkNode(this, "code-injection")
or
sinkNode(this, "js-eval") // deprecated label
}
}