hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-02 00:02:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #13163 from geoffw0/cleartextlogging

Browse Source 
Swift: Make the cleartext logging query consistent with other cleartext-* queries.
This commit is contained in:
Geoffrey White
2023-05-23 14:14:56 +01:00
committed by GitHub
parent f964d196dc 86eecea5f6
commit b2a958f8d3
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
swift/ql/src/queries/Security/CWE-312/CleartextLogging.ql
View File

@@ -6,7 +6,7 @@
* @problem.severity error
* @security-severity 7.5
* @precision high
* @id swift/clear-text-logging
* @id swift/cleartext-logging
* @tags security
* external/cwe/cwe-312
* external/cwe/cwe-359
@@ -18,7 +18,9 @@ import codeql.swift.dataflow.DataFlow
import codeql.swift.security.CleartextLoggingQuery
import CleartextLoggingFlow::PathGraph
from CleartextLoggingFlow::PathNode src, CleartextLoggingFlow::PathNode sink
where CleartextLoggingFlow::flowPath(src, sink)
select sink.getNode(), src, sink, "This $@ is written to a log file.", src.getNode(),
"potentially sensitive information"
from CleartextLoggingFlow::PathNode source, CleartextLoggingFlow::PathNode sink
where CleartextLoggingFlow::flowPath(source, sink)
select sink.getNode(), source, sink,
"This operation writes '" + sink.toString() +
"' to a log file. It may contain unencrypted sensitive data from $@.", source,
source.getNode().toString()