hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Swift: Add more swift/cleartext-logging sinks.

Browse Source
This commit is contained in:
Geoffrey White
2023-08-16 10:33:33 +01:00
parent 6a54a8bc62
commit da6c2b6c31
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
swift/ql/lib/codeql/swift/security/CleartextLoggingExtensions.qll
View File

@@ -89,6 +89,13 @@ private class LoggingSinks extends SinkModelCsv {
[
";;false;print(_:separator:terminator:);;;Argument[0..2];log-injection",
";;false;print(_:separator:terminator:toStream:);;;Argument[0..2];log-injection",
";;false;print(_:separator:terminator:to:);;;Argument[0..2];log-injection",
";;false;debugPrint(_:separator:terminator:);;;Argument[0..2];log-injection",
";;false;debugPrint(_:separator:terminator:to:);;;Argument[0..2];log-injection",
";;false;dump(_:name:indent:maxDepth:maxItems:);;;Argument[0..1];log-injection",
";;false;dump(_:to:name:indent:maxDepth:maxItems:);;;Argument[0];log-injection",
";;false;dump(_:to:name:indent:maxDepth:maxItems:);;;Argument[2];log-injection",
";;false;fatalError(_:file:line:);;;Argument[0];log-injection",
";;false;NSLog(_:_:);;;Argument[0..1];log-injection",
";;false;NSLogv(_:_:);;;Argument[0..1];log-injection",
";;false;vfprintf(_:_:_:);;;Agument[1..2];log-injection",