hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Refactored SuperAgentUrlRequest to use API graph.

Browse Source
This commit is contained in:
Napalys
2025-03-20 18:16:48 +01:00
parent 401c6ea0f6
commit d61d038b9b
3 changed files with 16 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/lib/semmle/javascript/frameworks/ClientRequests.qll
View File

@@ -529,17 +529,17 @@ module ClientRequest {
SuperAgentUrlRequest() {
exists(string moduleName | moduleName = "superagent" |
// Handle method calls like superagent.get(url)
this = DataFlow::moduleMember(moduleName, getSuperagentRequestMethodName()).getACall() and
this = API::moduleImport(moduleName).getMember(getSuperagentRequestMethodName()).getACall() and
url = this.getArgument(0)
or
// Handle direct calls like superagent('GET', url)
this = DataFlow::moduleImport(moduleName).getACall() and
this = API::moduleImport(moduleName).getACall() and
this.getArgument(0).mayHaveStringValue(getSuperagentRequestMethodName()) and
url = this.getArgument(1)
or
// Handle agent calls like superagent.agent().get(url)
exists(DataFlow::SourceNode agent |
agent = DataFlow::moduleMember(moduleName, "agent").getACall() and
agent = API::moduleImport(moduleName).getMember("agent").getACall() and
this = agent.getAMethodCall(httpMethodName()) and
url = this.getArgument(0)
)