hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 04:39:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Updated SocketClass to use API Graphs.

Browse Source
This commit is contained in:
Napalys
2025-04-04 08:41:47 +02:00
parent c7fad09664
commit e16a20e69f
6 changed files with 60 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
javascript/ql/src/Security/trest/test.ql Normal file
View File

@@ -0,0 +1,10 @@
import javascript
API::NewNode getAWebSocketInstance() { result instanceof ClientWebSocket::ClientSocket }
from DataFlow::Node handler
where
handler = getAWebSocketInstance().getReturn().getMember("onmessage").asSource()
or
handler = getAWebSocketInstance().getAPropertyWrite("onmessage").getRhs()
select handler, "This is a WebSocket onmessage handler."