hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5278 from erik-krogh/formData

Browse Source 
Approved by asgerf
This commit is contained in:
CodeQL CI
2021-02-26 08:13:41 -08:00
committed by GitHub
parent 0e70b58a41 c59e6fef80
commit b7c0d18c4a
4 changed files with 60 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
javascript/ql/src/semmle/javascript/frameworks/ClientRequests.qll
View File

@@ -854,4 +854,24 @@ module ClientRequest {
override DataFlow::Node getADataNode() { none() }
}
}
/**
* A model of a URL request made using [form-data](https://www.npmjs.com/package/form-data).
*/
class FormDataRequest extends ClientRequest::Range, API::InvokeNode {
API::Node form;
FormDataRequest() {
form = API::moduleImport("form-data").getInstance() and
this = form.getMember("submit").getACall()
}
override DataFlow::Node getUrl() { result = getArgument(0) }
override DataFlow::Node getHost() { result = getParameter(0).getMember("host").getARhs() }
override DataFlow::Node getADataNode() {
result = form.getMember("append").getACall().getParameter(1).getARhs()
}
}
}