File tree Expand file tree Collapse file tree 1 file changed +3
-13
lines changed
javascript/ql/src/experimental/Security/CWE-090 Expand file tree Collapse file tree 1 file changed +3
-13
lines changed Original file line number Diff line number Diff line change @@ -39,26 +39,16 @@ module LdapInjection {
3939 * An LDAP filter for an API call that executes an operation against the LDAP server.
4040 */
4141 class LdapjsSearchFilterAsSink extends Sink , LdapjsSearchFilter {
42- override DataFlow:: Node getQueryCall ( ) {
43- exists ( LdapjsClientAPICall call | result = call .getCalleeNode ( ) |
44- this =
45- call
46- .getArgument ( 1 )
47- .getALocalSource ( )
48- .( DataFlow:: SourceNode )
49- .getAPropertyWrite ( "filter" )
50- .getRhs ( )
51- )
42+ override DataFlow:: InvokeNode getQueryCall ( ) {
43+ result = this .( LdapjsSearchFilter ) .getQueryCall ( )
5244 }
5345 }
5446
5547 /**
5648 * An LDAP DN argument for an API call that executes an operation against the LDAP server.
5749 */
5850 class LdapjsDNArgumentAsSink extends Sink , LdapjsDNArgument {
59- override DataFlow:: Node getQueryCall ( ) {
60- exists ( LdapjsClientAPICall call | result = call .getCalleeNode ( ) | this = call .getArgument ( 0 ) )
61- }
51+ override DataFlow:: InvokeNode getQueryCall ( ) { result = this .( LdapjsDNArgument ) .getQueryCall ( ) }
6252 }
6353
6454 /**
You can’t perform that action at this time.
0 commit comments