hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 11:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: Port new sources based on comment from JarLob

Browse Source
This commit is contained in:
Asger F
2023-05-01 10:38:09 +02:00
parent 3d208c0a62
commit cb9b01cbb7
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/lib/semmle/javascript/frameworks/ActionsLib.qll
View File

@@ -26,11 +26,13 @@ private API::Node taintSource() {
or or
result = payload().getMember(["review", "review_comment", "comment"]).getMember("body") result = payload().getMember(["review", "review_comment", "comment"]).getMember("body")
or or
result = workflowRun().getMember("head_branch") result = workflowRun().getMember(["head_branch", "display_title"])
or
result = workflowRun().getMember("head_repository").getMember("description")
or or
result = commitObj().getMember("message") result = commitObj().getMember("message")
or or
result = commitObj().getMember("author").getMember(["name", "email"]) result = commitObj().getMember(["author", "committer"]).getMember(["name", "email"])
} }
private class GitHubActionsSource extends RemoteFlowSource { private class GitHubActionsSource extends RemoteFlowSource {