Files
codeql/go/ql/test/experimental/frameworks/Fiber/RemoteFlowSources.ql
2025-02-27 13:32:45 +00:00

23 lines
681 B
Plaintext

import go
import utils.test.InlineExpectationsTest
import experimental.frameworks.Fiber
module RemoteFlowSourceTest implements TestSig {
string getARelevantTag() { result = "remoteFlowSource" }
predicate hasActualResult(Location location, string element, string tag, string value) {
tag = "remoteFlowSource" and
exists(DataFlow::CallNode sinkCall, DataFlow::ArgumentNode arg |
sinkCall.getCalleeName() = "sink" and
arg = sinkCall.getAnArgument() and
arg.getAPredecessor*() instanceof RemoteFlowSource
|
element = arg.toString() and
value = "" and
arg.getLocation() = location
)
}
}
import MakeTest<RemoteFlowSourceTest>