зеркало из https://github.com/github/codeql.git
Python: List NoSQL injection sinks
This commit is contained in:
Родитель
16e1a00e88
Коммит
d7ad5a0f23
|
@ -58,6 +58,10 @@ DataFlow::Node relevantTaintSink(string kind) {
|
|||
or
|
||||
kind = "RegexInjection" and result instanceof RegexInjection::Sink
|
||||
or
|
||||
kind = "NoSqlInjection (string sink)" and result instanceof NoSqlInjection::StringSink
|
||||
or
|
||||
kind = "NoSqlInjection (dict sink)" and result instanceof NoSqlInjection::DictSink
|
||||
or
|
||||
kind = "ServerSideRequestForgery" and result instanceof ServerSideRequestForgery::Sink
|
||||
or
|
||||
kind = "SqlInjection" and result instanceof SqlInjection::Sink
|
||||
|
|
Загрузка…
Ссылка в новой задаче