Skip to content

Commit a3c8515

Browse files
committed
Swift: Accept cross-language standardized CSV sink label.
1 parent c2a3f37 commit a3c8515

File tree

4 files changed

+18
-4
lines changed

4 files changed

+18
-4
lines changed

swift/ql/lib/codeql/swift/security/CleartextLoggingExtensions.qll

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,11 @@ class CleartextLoggingAdditionalFlowStep extends Unit {
2626
* A sink defined in a CSV model.
2727
*/
2828
private class DefaultCleartextLoggingSink extends CleartextLoggingSink {
29-
DefaultCleartextLoggingSink() { sinkNode(this, "logging") }
29+
DefaultCleartextLoggingSink() {
30+
sinkNode(this, "log-injection")
31+
or
32+
sinkNode(this, "logging") // deprecated label
33+
}
3034
}
3135

3236
/**

swift/ql/lib/codeql/swift/security/SqlInjectionExtensions.qll

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -151,5 +151,9 @@ private class GrdbDefaultSqlInjectionSink extends SqlInjectionSink {
151151
* A sink defined in a CSV model.
152152
*/
153153
private class DefaultSqlInjectionSink extends SqlInjectionSink {
154-
DefaultSqlInjectionSink() { sinkNode(this, "sql") }
154+
DefaultSqlInjectionSink() {
155+
sinkNode(this, "sql-injection")
156+
or
157+
sinkNode(this, "sql") // deprecated label
158+
}
155159
}

swift/ql/lib/codeql/swift/security/UncontrolledFormatStringExtensions.qll

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,8 @@ private class DefaultUncontrolledFormatStringSink extends UncontrolledFormatStri
3939
this.asExpr() = any(FormattingFunctionCall fc).getFormat()
4040
or
4141
// a sink defined in a CSV model.
42-
sinkNode(this, "uncontrolled-format-string")
42+
sinkNode(this, "format-string")
43+
or
44+
sinkNode(this, "uncontrolled-format-string") // deprecated label
4345
}
4446
}

swift/ql/lib/codeql/swift/security/UnsafeJsEvalExtensions.qll

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -144,5 +144,9 @@ private class DefaultUnsafeJsEvalAdditionalFlowStep extends UnsafeJsEvalAddition
144144
* A sink defined in a CSV model.
145145
*/
146146
private class DefaultUnsafeJsEvalSink extends UnsafeJsEvalSink {
147-
DefaultUnsafeJsEvalSink() { sinkNode(this, "js-eval") }
147+
DefaultUnsafeJsEvalSink() {
148+
sinkNode(this, "code-injection")
149+
or
150+
sinkNode(this, "js-eval") // deprecated label
151+
}
148152
}

0 commit comments

Comments
 (0)