We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e2e5545 commit 15562e4Copy full SHA for 15562e4
javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
@@ -33,9 +33,17 @@ module Ldapjs {
33
* Gets a data flow node for the client `search` options.
34
*/
35
class LdapjsSearchOptions extends DataFlow::SourceNode {
36
+ DataFlow::CallNode queryCall;
37
+
38
LdapjsSearchOptions() {
- this = any(LdapjsClient client).getAMemberCall("search").getArgument(1).getALocalSource()
39
+ queryCall = any(LdapjsClient client).getAMemberCall("search") and
40
+ this = queryCall.getArgument(1).getALocalSource()
41
}
42
43
+ /**
44
+ * Gets the LDAP query call that these options are used in.
45
+ */
46
+ DataFlow::InvokeNode getQueryCall() { result = queryCall }
47
48
49
/**
0 commit comments