hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll

Browse Source 
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
This commit is contained in:
Alessio Della Libera
2020-08-26 01:48:05 +02:00
committed by GitHub
parent a1f64e26cf
commit e027c8cc13
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
javascript/ql/src/experimental/Security/CWE-614/InsecureCookie.qll
View File

@@ -124,9 +124,10 @@ module Cookie {
*/
class InsecureJsCookie extends Cookie {
InsecureJsCookie() {
this = DataFlow::globalVarRef("Cookie").getAMemberCall("set") or
this = DataFlow::globalVarRef("Cookie").getAMemberCall("noConflict").getAMemberCall("set") or
this = DataFlow::moduleMember("js-cookie", "set").getACall()
this =
[DataFlow::globalVarRef("Cookie"),
DataFlow::globalVarRef("Cookie").getAMemberCall("noConflict"),
DataFlow::moduleImport("js-cookie")].getAMemberCall("set")
}
override string getKind() { result = "js-cookie" }