hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

autoformat

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-09-02 20:55:33 +02:00
parent 785f335ab8
commit fb3148a7a8
2 changed files with 6 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/src/experimental/Security/CWE-090/LdapInjection.ql
View File

@@ -17,5 +17,4 @@ import LdapInjection::LdapInjection
from LdapInjectionConfiguration config, DataFlow::PathNode source, DataFlow::PathNode sink
where config.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "$@ might include code from $@.",
sink.getNode().(Sink).getQueryCall(), "LDAP query call", source.getNode(),
"user-provided value"
sink.getNode().(Sink).getQueryCall(), "LDAP query call", source.getNode(), "user-provided value"

14
javascript/ql/src/experimental/Security/CWE-090/LdapInjectionCustomizations.qll
View File

@@ -39,9 +39,8 @@ module LdapInjection {
* An LDAP filter for an API call that executes an operation against the LDAP server.
*/
class LdapjsSearchFilterAsSink extends Sink {
LdapjsSearchFilterAsSink() {
this instanceof LdapjsSearchFilter
}
LdapjsSearchFilterAsSink() { this instanceof LdapjsSearchFilter }
override DataFlow::InvokeNode getQueryCall() {
result = this.(LdapjsSearchFilter).getQueryCall()
}
@@ -51,12 +50,9 @@ module LdapInjection {
* An LDAP DN argument for an API call that executes an operation against the LDAP server.
*/
class LdapjsDNArgumentAsSink extends Sink {
LdapjsDNArgumentAsSink() {
this instanceof LdapjsDNArgument
}
override DataFlow::InvokeNode getQueryCall() {
result = this.(LdapjsDNArgument).getQueryCall()
}
LdapjsDNArgumentAsSink() { this instanceof LdapjsDNArgument }
override DataFlow::InvokeNode getQueryCall() { result = this.(LdapjsDNArgument).getQueryCall() }
}
/**