hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python/Ruby/Swift: Rename references.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2023-03-23 13:01:38 +01:00
parent 72415c7c2c
commit d0b7ffda70
5 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ruby/ql/lib/codeql/ruby/security/StoredXSSQuery.qll
View File

@@ -56,7 +56,7 @@ module StoredXss {
}
}
import TaintTracking::Make<Config>
import TaintTracking::Global<Config>
}
/** DEPRECATED: Alias for StoredXss */

4
ruby/ql/lib/codeql/ruby/security/XSS.qll
View File

@@ -304,7 +304,7 @@ private module OrmTracking {
}
}
import DataFlow::Make<Config>
import DataFlow::Global<Config>
}
/** Provides default sources, sinks and sanitizers for detecting stored cross-site scripting (XSS) vulnerabilities. */
@@ -336,7 +336,7 @@ module StoredXss {
private class OrmFieldAsSource extends Source instanceof DataFlow::CallNode {
OrmFieldAsSource() {
exists(DataFlow::CallNode subSrc |
OrmTracking::hasFlow(subSrc, this.getReceiver()) and
OrmTracking::flow(subSrc, this.getReceiver()) and
subSrc.(OrmInstantiation).methodCallMayAccessField(this.getMethodName())
)
}

2
ruby/ql/src/queries/security/cwe-079/StoredXSS.ql
View File

@@ -17,6 +17,6 @@ import codeql.ruby.security.StoredXSSQuery
import StoredXss::PathGraph
from StoredXss::PathNode source, StoredXss::PathNode sink
where StoredXss::hasFlowPath(source, sink)
where StoredXss::flowPath(source, sink)
select sink.getNode(), source, sink, "Stored cross-site scripting vulnerability due to $@.",
source.getNode(), "stored value"