hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Rename cors-misconfiguration to cors-origin.

Browse Source
This commit is contained in:
Napalys Klicius
2025-09-05 11:30:07 +02:00
parent e6eacca50b
commit d8c4d6deb4
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/ext/apollo-server.model.yml
View File

@@ -10,7 +10,7 @@ extensions:
extensible: sinkModel
data:
- ["@apollo/server", "Member[gql].Argument[0]", "sql-injection"]
- ["@apollo/server", "Member[ApolloServer,ApolloServerBase].Argument[0].Member[cors].Member[origin]", "cors-misconfiguration"]
- ["@apollo/server", "Member[ApolloServer,ApolloServerBase].Argument[0].Member[cors].Member[origin]", "cors-origin"]
- addsTo:
pack: codeql/javascript-all

2
javascript/ql/lib/ext/cors.model.yml
View File

@@ -3,4 +3,4 @@ extensions:
pack: codeql/javascript-all
extensible: sinkModel
data:
- ["cors", "Argument[0].Member[origin]", "cors-misconfiguration"]
- ["cors", "Argument[0].Member[origin]", "cors-origin"]

2
javascript/ql/lib/semmle/javascript/security/CorsPermissiveConfigurationCustomizations.qll
View File

@@ -66,7 +66,7 @@ module CorsPermissiveConfiguration {
* The value of cors origin when initializing the application.
*/
class CorsOriginSink extends Sink, DataFlow::ValueNode {
CorsOriginSink() { this = ModelOutput::getASinkNode("cors-misconfiguration").asSink() }
CorsOriginSink() { this = ModelOutput::getASinkNode("cors-origin").asSink() }
}
/**