hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll

Browse Source 
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Max Schaefer
2023-10-26 13:06:52 +01:00
committed by GitHub
parent 2c7291336d
commit aff848b038
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll
View File

@@ -115,12 +115,11 @@ abstract class RateLimitingMiddleware extends DataFlow::SourceNode {
*/
class ExpressRateLimit extends RateLimitingMiddleware {
ExpressRateLimit() {
exists(API::Node rateLimitImport, API::Node rateLimit |
rateLimitImport = API::moduleImport("express-rate-limit") and
rateLimit in [rateLimitImport, rateLimitImport.getMember("rateLimit")]
|
this = rateLimit.getReturn().asSource()
)
this =
[
API::moduleImport("express-rate-limit"),
API::moduleImport("express-rate-limit").getMember("rateLimit")
].getReturn().asSource()
}
}