File tree Expand file tree Collapse file tree 3 files changed +4
-4
lines changed Expand file tree Collapse file tree 3 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -1311,7 +1311,7 @@ class JwtDecoding extends DataFlow::Node instanceof JwtDecoding::Range {
1311
1311
DataFlow:: Node getOptions ( ) { result = super .getOptions ( ) }
1312
1312
1313
1313
/** Checks if the signature gets verified while decoding. */
1314
- predicate verifies ( ) { super .verifies ( ) }
1314
+ predicate verifiesSignature ( ) { super .verifiesSignature ( ) }
1315
1315
}
1316
1316
1317
1317
/** Provides a class for modeling new Jwt token encoding APIs. */
@@ -1336,6 +1336,6 @@ module JwtDecoding {
1336
1336
abstract DataFlow:: Node getOptions ( ) ;
1337
1337
1338
1338
/** Checks if the signature gets verified while decoding. */
1339
- abstract predicate verifies ( ) ;
1339
+ abstract predicate verifiesSignature ( ) ;
1340
1340
}
1341
1341
}
Original file line number Diff line number Diff line change @@ -45,7 +45,7 @@ module Jwt {
45
45
46
46
override DataFlow:: Node getOptions ( ) { result = this .getArgument ( 3 ) }
47
47
48
- override predicate verifies ( ) {
48
+ override predicate verifiesSignature ( ) {
49
49
not this .getArgument ( 2 ) .getConstantValue ( ) .isBoolean ( false ) and
50
50
not this .getAlgorithm ( ) .getConstantValue ( ) .isStringlikeValue ( "none" )
51
51
or
Original file line number Diff line number Diff line change 12
12
private import codeql.ruby.Concepts
13
13
14
14
from JwtDecoding jwtDecoding
15
- where not jwtDecoding .verifies ( )
15
+ where not jwtDecoding .verifiesSignature ( )
16
16
select jwtDecoding .getPayload ( ) , "is not verified with a cryptographic secret or public key."
You can’t perform that action at this time.
0 commit comments