File tree Expand file tree Collapse file tree 2 files changed +6
-5
lines changed Expand file tree Collapse file tree 2 files changed +6
-5
lines changed Original file line number Diff line number Diff line change @@ -29,12 +29,12 @@ module NetLdap {
29
29
30
30
/** A call that establishes a LDAP Connection */
31
31
private class NetLdapConnection extends DataFlow:: CallNode {
32
- NetLdapConnection ( ) { this in [ ldap ( ) .getAnInstantiation ( ) , ldap ( ) .getAMethodCall ( [ "open" ] ) ] }
32
+ NetLdapConnection ( ) { this in [ ldap ( ) .getAnInstantiation ( ) , ldap ( ) .getAMethodCall ( "open" ) ] }
33
33
}
34
34
35
35
/** A call that constructs a LDAP query */
36
36
private class NetLdapFilter extends LdapConstruction:: Range , DataFlow:: CallNode {
37
- NetLdapFilter ( ) { this = any ( ldap ( ) .getMember ( "Filter" ) .getAMethodCall ( [ "eq" ] ) ) }
37
+ NetLdapFilter ( ) { this = any ( ldap ( ) .getMember ( "Filter" ) .getAMethodCall ( "eq" ) ) }
38
38
39
39
override DataFlow:: Node getQuery ( ) { result = this .getArgument ( [ 0 , 1 ] ) }
40
40
}
Original file line number Diff line number Diff line change @@ -34,8 +34,8 @@ module LdapInjection {
34
34
exists ( DataFlow:: CallNode filterCall |
35
35
(
36
36
filterCall =
37
- API:: getTopLevelMember ( "Net" ) .getMember ( "LDAP" ) .getMember ( "Filter" ) .getAMethodCall ( [ "eq" ] ) or
38
- filterCall .getMethodName ( ) = [ "[]" ]
37
+ API:: getTopLevelMember ( "Net" ) .getMember ( "LDAP" ) .getMember ( "Filter" ) .getAMethodCall ( "eq" ) or
38
+ filterCall .getMethodName ( ) = "[]"
39
39
) and
40
40
n1 = filterCall .getArgument ( [ 0 , 1 ] ) and
41
41
n2 = filterCall
@@ -64,5 +64,6 @@ module LdapInjection {
64
64
* sanitizer-guard.
65
65
*/
66
66
private class StringConstArrayInclusionCallAsSanitizer extends Sanitizer ,
67
- StringConstArrayInclusionCallBarrier { }
67
+ StringConstArrayInclusionCallBarrier
68
+ { }
68
69
}
You can’t perform that action at this time.
0 commit comments