hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-03 04:40:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

add new queries to mapping query

Browse Source
This commit is contained in:
tombolton
2022-03-09 13:19:15 +00:00
parent dbe90ca471
commit dae4708cae
1 changed files with 35 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
javascript/ql/experimental/adaptivethreatmodeling/modelbuilding/extraction/ExtractEndpointMapping.ql
View File

@@ -2,21 +2,46 @@ import experimental.adaptivethreatmodeling.SqlInjectionATM as SqlInjectionATM
import experimental.adaptivethreatmodeling.NosqlInjectionATM as NosqlInjectionATM
import experimental.adaptivethreatmodeling.TaintedPathATM as TaintedPathATM
import experimental.adaptivethreatmodeling.XssATM as XssATM
import experimental.adaptivethreatmodeling.StoredXssATM as StoredXssATM
import experimental.adaptivethreatmodeling.XssThroughDomATM as XssThroughDomATM
import experimental.adaptivethreatmodeling.CodeInjectionATM as CodeInjectionATM
import experimental.adaptivethreatmodeling.AdaptiveThreatModeling
from string queryName, ATMConfig c, EndpointType e
where
(
queryName = "SqlInjectionATM.ql" and
c instanceof SqlInjectionATM::SqlInjectionATMConfig
queryName = "Unknown" and
endpointTypeEncoded = 0
or
queryName = "NosqlInjectionATM.ql" and
c instanceof NosqlInjectionATM::NosqlInjectionATMConfig
queryName = "NotASink" and
endpointTypeEncoded = 0
or
queryName = "TaintedPathInjectionATM.ql" and
c instanceof TaintedPathATM::TaintedPathATMConfig
queryName = "Xss" and
c instanceof XssATM::DomBasedXssATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
or
queryName = "XssATM.ql" and c instanceof XssATM::DomBasedXssATMConfig
) and
e = c.getASinkEndpointType()
select queryName, e.getEncoding() as endpointTypeEncoded
queryName = "StoredXss" and
c instanceof StoredXssATM::StoredXssATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
or
queryName = "XssThroughDom" and
c instanceof XssThroughDomATM::XssThroughDOMATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
or
queryName = "SqlInjection" and
c instanceof SqlInjectionATM::SqlInjectionATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
or
queryName = "NosqlInjection" and
c instanceof NosqlInjectionATM::NosqlInjectionATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
or
queryName = "TaintedPath" and
c instanceof TaintedPathATM::TaintedPathATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
or
queryName = "CodeInjection" and
c instanceof CodeInjectionATM::CodeInjectionATMConfig and
endpointTypeEncoded = c.getASinkEndpointType().getEncoding()
)
select queryName, endpointTypeEncoded order by encodingTypeEncoded