Files
codeql/javascript/ql/test/library-tests/frameworks/AsyncPackage/AsyncTaintTracking.ql
2018-11-06 12:12:43 +00:00

24 lines
498 B
Plaintext

import javascript
DataFlow::CallNode getACall(string name) {
result.getCalleeName() = name
}
class BasicConfig extends TaintTracking::Configuration {
BasicConfig() { this = "BasicConfig" }
override
predicate isSource(DataFlow::Node node) {
node = getACall("source")
}
override
predicate isSink(DataFlow::Node node) {
node = getACall("sink").getAnArgument()
}
}
from BasicConfig cfg, DataFlow::Node src, DataFlow::Node sink
where cfg.hasFlow(src, sink)
select src, sink