hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: List NoSQL injection sinks

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2023-09-29 13:16:50 +02:00
parent 16e1a00e88
commit d7ad5a0f23
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/meta/alerts/TaintSinks.ql
View File

@@ -58,6 +58,10 @@ DataFlow::Node relevantTaintSink(string kind) {
or
kind = "RegexInjection" and result instanceof RegexInjection::Sink
or
kind = "NoSqlInjection (string sink)" and result instanceof NoSqlInjection::StringSink
or
kind = "NoSqlInjection (dict sink)" and result instanceof NoSqlInjection::DictSink
or
kind = "ServerSideRequestForgery" and result instanceof ServerSideRequestForgery::Sink
or
kind = "SqlInjection" and result instanceof SqlInjection::Sink