hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: Rename to isLikelyCaseSensitiveRegExp

Browse Source
This commit is contained in:
Asger F
2022-06-28 10:21:33 +02:00
parent fd28397056
commit c1a2e2abe0
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/src/Security/CWE-178/CaseSensitiveMiddlewarePath.ql
View File

@@ -27,10 +27,10 @@ RegExpCharacterClass getEnclosingClass(RegExpTerm term) {
} }
/** /**
* Holds if `term` distinguishes between upper and lower case letters, assuming the `i` flag is not present. * Holds if `term` seems to distinguish between upper and lower case letters, assuming the `i` flag is not present.
*/ */
pragma[inline] pragma[inline]
predicate isCaseSensitiveRegExp(RegExpTerm term) { predicate isLikelyCaseSensitiveRegExp(RegExpTerm term) {
exists(RegExpConstant const | exists(RegExpConstant const |
const = term.getAChild*() and const = term.getAChild*() and
const.getValue().regexpMatch(".*[a-zA-Z].*") and const.getValue().regexpMatch(".*[a-zA-Z].*") and
@@ -89,7 +89,7 @@ predicate isCaseSensitiveMiddleware(
) and ) and
arg = call.getArgument(0) and arg = call.getArgument(0) and
regexp.getAReference().flowsTo(arg) and regexp.getAReference().flowsTo(arg) and
isCaseSensitiveRegExp(regexp.getRoot()) and isLikelyCaseSensitiveRegExp(regexp.getRoot()) and
exists(string flags | exists(string flags |
flags = regexp.getFlags() and flags = regexp.getFlags() and
not RegExp::isIgnoreCase(flags) not RegExp::isIgnoreCase(flags)