Skip to content

Commit 2d8318d

Browse files
committed
remove unnecessary imports and edit .qhelp
1 parent 065b694 commit 2d8318d

File tree

2 files changed

+4
-3
lines changed

2 files changed

+4
-3
lines changed

ruby/ql/lib/codeql/ruby/frameworks/Ldap.qll

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,6 @@ private import ruby
66
private import codeql.ruby.ApiGraphs
77
private import codeql.ruby.dataflow.FlowSummary
88
private import codeql.ruby.Concepts
9-
private import codeql.ruby.CFG
10-
private import codeql.ruby.AST
119

1210
/**
1311
* Provides modeling for `net-ldap` a ruby library for LDAP.

ruby/ql/src/experimental/ldap-injection/LdapInjection.qhelp

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,11 +40,14 @@ components, and search for a completely different set of values.</p>
4040
<p>In the second example, the input provided by the user is sanitized before it is included in the search filter or DN.
4141
This ensures the meaning of the query cannot be changed by a malicious user.</p>
4242

43-
<sample src="examples/LdapInjectionBad.rb" />
43+
<sample src="examples/LdapInjectionGood.rb" />
4444
</example>
4545

4646
<references>
4747
<li>OWASP: <a href="https://cheatsheetseries.owasp.org/cheatsheets/LDAP_Injection_Prevention_Cheat_Sheet.html">LDAP Injection Prevention Cheat Sheet</a>.</li>
4848
<li>OWASP: <a href="https://owasp.org/www-community/attacks/LDAP_Injection">LDAP Injection</a>.</li>
49+
<li>Wikipedia: <a href="https://en.wikipedia.org/wiki/LDAP_injection">LDAP injection</a>.</li>
50+
<li>BlackHat: <a href="https://www.blackhat.com/presentations/bh-europe-08/Alonso-Parada/Whitepaper/bh-eu-08-alonso-parada-WP.pdf">LDAP Injection and Blind LDAP Injection</a>.</li>
51+
<li>LDAP: <a href="https://ldap.com/2018/05/04/understanding-and-defending-against-ldap-injection-attacks/">Understanding and Defending Against LDAP Injection Attacks</a>.</li>
4952
</references>
5053
</qhelp>

0 commit comments

Comments
 (0)