Skip to content

Commit d90630a

Browse files
committed
Python: fix query file
1 parent 3fb579e commit d90630a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

python/ql/src/Security/CWE-943/NoSQLInjection.ql

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,17 +4,17 @@
44
* malicious NoSQL code by the user.
55
* @kind path-problem
66
* @problem.severity error
7+
* @security-severity 8.8
78
* @id py/nosql-injection
89
* @tags security
9-
* experimental
1010
* external/cwe/cwe-943
1111
*/
1212

1313
import python
1414
import semmle.python.security.dataflow.NoSQLInjectionQuery
15-
import Flow::PathGraph
15+
import NoSqlInjectionFlow::PathGraph
1616

17-
from Flow::PathNode source, Flow::PathNode sink
18-
where Flow::flowPath(source, sink)
17+
from NoSqlInjectionFlow::PathNode source, NoSqlInjectionFlow::PathNode sink
18+
where NoSqlInjectionFlow::flowPath(source, sink)
1919
select sink.getNode(), source, sink, "This NoSQL query contains an unsanitized $@.", source,
2020
"user-provided value"

0 commit comments

Comments
 (0)