mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
26 lines
911 B
Plaintext
26 lines
911 B
Plaintext
import javascript
|
|
import semmle.javascript.security.dataflow.RequestForgeryQuery as RequestForgery
|
|
import semmle.javascript.security.dataflow.ClientSideRequestForgeryQuery as ClientSideRequestForgery
|
|
deprecated import utils.test.ConsistencyChecking
|
|
|
|
query predicate resultInWrongFile(DataFlow::Node node) {
|
|
exists(string filePattern |
|
|
RequestForgery::RequestForgeryFlow::flowTo(node) and
|
|
filePattern = ".*serverSide.*"
|
|
or
|
|
ClientSideRequestForgery::ClientSideRequestForgeryFlow::flowTo(node) and
|
|
filePattern = ".*clientSide.*"
|
|
|
|
|
not node.getFile().getRelativePath().regexpMatch(filePattern)
|
|
)
|
|
}
|
|
|
|
deprecated class Consistency extends ConsistencyConfiguration {
|
|
Consistency() { this = "Consistency" }
|
|
|
|
override DataFlow::Node getAnAlert() {
|
|
RequestForgery::RequestForgeryFlow::flowTo(result) or
|
|
ClientSideRequestForgery::ClientSideRequestForgeryFlow::flowTo(result)
|
|
}
|
|
}
|