mirror of
https://github.com/github/codeql.git
synced 2026-01-10 21:20:22 +01:00
23 lines
782 B
Plaintext
23 lines
782 B
Plaintext
import codeql.ruby.AST
|
|
import codeql.ruby.DataFlow
|
|
import PathGraph
|
|
import TestUtilities.InlineFlowTest
|
|
import codeql.ruby.security.InsecureDownloadQuery
|
|
|
|
class FlowTest extends InlineFlowTest {
|
|
override DataFlow::Configuration getValueFlowConfig() { result = any(Configuration config) }
|
|
|
|
override DataFlow::Configuration getTaintFlowConfig() { none() }
|
|
|
|
override string getARelevantTag() { result = "BAD" }
|
|
|
|
override predicate hasActualResult(Location location, string element, string tag, string value) {
|
|
tag = "BAD" and
|
|
super.hasActualResult(location, element, "hasValueFlow", value)
|
|
}
|
|
}
|
|
|
|
from DataFlow::PathNode source, DataFlow::PathNode sink, Configuration conf
|
|
where conf.hasFlowPath(source, sink)
|
|
select sink, source, sink, "$@", source, source.toString()
|