File tree Expand file tree Collapse file tree 2 files changed +0
-52
lines changed
python/ql/src/experimental/semmle/python Expand file tree Collapse file tree 2 files changed +0
-52
lines changed Original file line number Diff line number Diff line change @@ -76,45 +76,6 @@ module XML {
76
76
abstract predicate vulnerable ( XMLVulnerabilityKind kind ) ;
77
77
}
78
78
}
79
-
80
- /**
81
- * A data-flow node that constructs an XML parser.
82
- *
83
- * Extend this class to model new APIs. If you want to refine existing API models,
84
- * extend `XMLParser` instead.
85
- */
86
- class XMLParser extends DataFlow:: Node instanceof XMLParser:: Range {
87
- /**
88
- * Gets the argument containing the content to parse.
89
- */
90
- DataFlow:: Node getAnInput ( ) { result = super .getAnInput ( ) }
91
-
92
- /**
93
- * Holds if the parser is vulnerable to `kind`.
94
- */
95
- predicate vulnerable ( XMLVulnerabilityKind kind ) { super .vulnerable ( kind ) }
96
- }
97
-
98
- /** Provides classes for modeling XML parsers. */
99
- module XMLParser {
100
- /**
101
- * A data-flow node that constructs an XML parser.
102
- *
103
- * Extend this class to model new APIs. If you want to refine existing API models,
104
- * extend `XMLParser` instead.
105
- */
106
- abstract class Range extends DataFlow:: Node {
107
- /**
108
- * Gets the argument containing the content to parse.
109
- */
110
- abstract DataFlow:: Node getAnInput ( ) ;
111
-
112
- /**
113
- * Holds if the parser is vulnerable to `kind`.
114
- */
115
- abstract predicate vulnerable ( XMLVulnerabilityKind kind ) ;
116
- }
117
- }
118
79
}
119
80
120
81
/** Provides classes for modeling LDAP query execution-related APIs. */
Original file line number Diff line number Diff line change @@ -61,19 +61,6 @@ module XmlEntityInjection {
61
61
override string getVulnerableKind ( ) { xmlParsing .vulnerable ( result ) }
62
62
}
63
63
64
- /**
65
- * An input to an XML parser, considered as a flow sink.
66
- *
67
- * See `XML::XMLParser`
68
- */
69
- class XMLParserInputAsSink extends Sink {
70
- XML:: XMLParser xmlParser ;
71
-
72
- XMLParserInputAsSink ( ) { this = xmlParser .getAnInput ( ) }
73
-
74
- override string getVulnerableKind ( ) { xmlParser .vulnerable ( result ) }
75
- }
76
-
77
64
/**
78
65
* A source of remote user input, considered as a flow source.
79
66
*/
You can’t perform that action at this time.
0 commit comments