File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
javascript/ql/lib/semmle/javascript Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -35,7 +35,7 @@ module LDAPjs {
35
35
}
36
36
37
37
/** A creation of an LDAPjs filter, or object containing a filter, that doesn't sanitizes the input. */
38
- abstract class LDAPFilterStep extends DataFlow:: Node {
38
+ abstract class TaintPreservingLdapFilterStep extends DataFlow:: Node {
39
39
/** The input that creates (part of) an LDAPjs filter. */
40
40
abstract DataFlow:: Node getInput ( ) ;
41
41
@@ -44,7 +44,7 @@ module LDAPjs {
44
44
}
45
45
46
46
/** A call to the ldap utility method "parseFilter". */
47
- private class ParseFilter extends LDAPFilterStep , API:: CallNode {
47
+ private class ParseFilter extends TaintPreservingLdapFilterStep , API:: CallNode {
48
48
ParseFilter ( ) { this = ldapjs ( ) .getMember ( "parseFilter" ) .getACall ( ) }
49
49
50
50
override DataFlow:: Node getInput ( ) { result = this .getArgument ( 0 ) }
@@ -56,7 +56,7 @@ module LDAPjs {
56
56
* A filter used in call to "search" on an LDAPjs client.
57
57
* We model that as a step from the ".filter" write to the options object itself.
58
58
*/
59
- private class SearchFilter extends LDAPFilterStep {
59
+ private class SearchFilter extends TaintPreservingLdapFilterStep {
60
60
SearchOptions options ;
61
61
62
62
SearchFilter ( ) {
Original file line number Diff line number Diff line change @@ -26,7 +26,7 @@ class Configuration extends TaintTracking::Configuration {
26
26
}
27
27
28
28
override predicate isAdditionalTaintStep ( DataFlow:: Node pred , DataFlow:: Node succ ) {
29
- exists ( LDAPjs:: LDAPFilterStep filter |
29
+ exists ( LDAPjs:: TaintPreservingLdapFilterStep filter |
30
30
pred = filter .getInput ( ) and
31
31
succ = filter .getOutput ( )
32
32
)
You can’t perform that action at this time.
0 commit comments