hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added IRestClientAsync methods to external location sink. Removed import from

Browse Source 
Remote.qll, as it is un-necessary now.
This commit is contained in:
mr-sherman
2021-03-29 14:37:51 -04:00
parent 13997caa32
commit bf2d7b3a16
2 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
csharp/ql/src/semmle/code/csharp/frameworks/ServiceStack.qll
View File

@@ -91,9 +91,11 @@ module Sinks {
exists(MethodCall mc |
mc.getTarget().getQualifiedName() in [
"ServiceStack.IRestClient.Get", "ServiceStack.IRestClient.Put",
"ServiceStack.IRestClient.Post", "ServiceStack.IRestClient.Delete",
"ServiceStack.IRestClient.Post", "ServiceStack.IRestClient.Put",
"ServiceStack.IRestClient.Patch", "ServiceStack.IRestClient.Send"
"ServiceStack.IRestClient.Post", "ServiceStack.IRestClient.Delete",
"ServiceStack.IRestClient.Patch", "ServiceStack.IRestClient.Send",
"ServiceStack.IRestClientAsync.GetAsync","ServiceStack.IRestClientAsync.DeleteAsync",
"ServiceStack.IRestClientAsync.PutAsync","ServiceStack.IRestClientAsync.PostAsync",
"ServiceStack.IRestClientAsync.PatchAsync","ServiceStack.IRestClientAsync.CustomMethodAsync"
] and
this.asExpr() = mc.getAnArgument()
)

1
csharp/ql/src/semmle/code/csharp/security/dataflow/flowsinks/Remote.qll
View File

@@ -8,7 +8,6 @@ private import ExternalLocationSink
private import Html
private import semmle.code.csharp.security.dataflow.XSS
private import semmle.code.csharp.frameworks.system.web.UI
private import semmle.code.csharp.frameworks.ServiceStack::Sinks
/** A data flow sink of remote user output. */
abstract class RemoteFlowSink extends DataFlow::Node { }