Skip to content

Commit 78ebcee

Browse files
Update javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
1 parent b86b9ba commit 78ebcee

File tree

1 file changed

+8
-3
lines changed
  • javascript/ql/src/experimental/Security/CWE-090

1 file changed

+8
-3
lines changed

javascript/ql/src/experimental/Security/CWE-090/Ldapjs.qll

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,9 +42,14 @@ module Ldapjs {
4242
* A filter used in a `search` operation against the LDAP server.
4343
*/
4444
class LdapjsSearchFilter extends DataFlow::Node {
45-
LdapjsSearchFilter() {
46-
this = any(LdapjsSearchOptions options).getAPropertyWrite("filter").getRhs()
47-
}
45+
LdapjsSearchOptions options;
46+
47+
LdapjsSearchFilter() { this = options.getAPropertyWrite("filter").getRhs() }
48+
49+
/**
50+
* Gets the LDAP query call that this filter is used in.
51+
*/
52+
DataFlow::InvokeNode getQueryCall() { result = options.getQueryCall() }
4853
}
4954

5055
/**

0 commit comments

Comments
 (0)