Skip to content

Commit 8c12836

Browse files
committed
Go: SSRF
1 parent 6c87c3f commit 8c12836

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

go/ql/src/experimental/CWE-918/SSRF.qll

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,8 +31,12 @@ module ServerSideRequestForgery {
3131

3232
predicate isBarrierOut(DataFlow::Node node) { node instanceof SanitizerEdge }
3333

34-
predicate observeDiffInformedIncrementalMode() {
35-
any() // TODO: Make sure that the location overrides match the query's select clause: Column 1 selects sink.getARequest (/Users/d10c/src/semmle-code/ql/go/ql/src/experimental/CWE-918/SSRF.ql@23:8:23:14)
34+
predicate observeDiffInformedIncrementalMode() { any() }
35+
36+
Location getASelectedSourceLocation(DataFlow::Node source) { none() }
37+
38+
Location getASelectedSinkLocation(DataFlow::Node sink) {
39+
result = sink.(Sink).getARequest().getLocation()
3640
}
3741
}
3842

0 commit comments

Comments
 (0)