hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

rename LDapFilterStep to TaintPreservingLDapFilterStep

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-10-27 18:56:04 +02:00
parent 5a1eb1995c
commit c1ab49fe8a
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/lib/semmle/javascript/frameworks/LDAPjs.qll
View File

@@ -35,7 +35,7 @@ module LDAPjs {
}
/** A creation of an LDAPjs filter, or object containing a filter, that doesn't sanitizes the input. */
abstract class LDAPFilterStep extends DataFlow::Node {
abstract class TaintPreservingLdapFilterStep extends DataFlow::Node {
/** The input that creates (part of) an LDAPjs filter. */
abstract DataFlow::Node getInput();
@@ -44,7 +44,7 @@ module LDAPjs {
}
/** A call to the ldap utility method "parseFilter". */
private class ParseFilter extends LDAPFilterStep, API::CallNode {
private class ParseFilter extends TaintPreservingLdapFilterStep, API::CallNode {
ParseFilter() { this = ldapjs().getMember("parseFilter").getACall() }
override DataFlow::Node getInput() { result = this.getArgument(0) }
@@ -56,7 +56,7 @@ module LDAPjs {
* A filter used in call to "search" on an LDAPjs client.
* We model that as a step from the ".filter" write to the options object itself.
*/
private class SearchFilter extends LDAPFilterStep {
private class SearchFilter extends TaintPreservingLdapFilterStep {
SearchOptions options;
SearchFilter() {

2
javascript/ql/lib/semmle/javascript/security/dataflow/SqlInjectionQuery.qll
View File

@@ -26,7 +26,7 @@ class Configuration extends TaintTracking::Configuration {
}
override predicate isAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node succ) {
exists(LDAPjs::LDAPFilterStep filter |
exists(LDAPjs::TaintPreservingLdapFilterStep filter |
pred = filter.getInput() and
succ = filter.getOutput()
)