|
5 | 5 |
|
6 | 6 | private import codeql.ruby.DataFlow |
7 | 7 | private import codeql.ruby.TaintTracking |
| 8 | +private import LdapInjectionCustomizations::LdapInjection as LI |
8 | 9 |
|
9 | | -/** Provides a taint-tracking configuration for detecting LDAP Injections vulnerabilities. */ |
10 | | -module LdapInjection { |
| 10 | +/** |
| 11 | + * Provides a taint-tracking configuration for detecting LDAP Injections vulnerabilities. |
| 12 | + * DEPRECATED: Use `LdapInjectionFlow` instead |
| 13 | + */ |
| 14 | +deprecated module LdapInjection { |
11 | 15 | import LdapInjectionCustomizations::LdapInjection |
| 16 | + import TaintTracking::Global<LdapInjectionConfig> |
| 17 | +} |
12 | 18 |
|
13 | | - /** |
14 | | - * A taint-tracking configuration for detecting LDAP Injections vulnerabilities. |
15 | | - */ |
16 | | - private module Config implements DataFlow::ConfigSig { |
17 | | - predicate isSource(DataFlow::Node source) { source instanceof Source } |
| 19 | +private module LdapInjectionConfig implements DataFlow::ConfigSig { |
| 20 | + predicate isSource(DataFlow::Node source) { source instanceof LI::Source } |
18 | 21 |
|
19 | | - predicate isSink(DataFlow::Node sink) { sink instanceof Sink } |
| 22 | + predicate isSink(DataFlow::Node sink) { sink instanceof LI::Sink } |
20 | 23 |
|
21 | | - predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer } |
| 24 | + predicate isBarrier(DataFlow::Node node) { node instanceof LI::Sanitizer } |
22 | 25 |
|
23 | | - predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) { |
24 | | - LdapInjection::isAdditionalFlowStep(node1, node2) |
25 | | - } |
| 26 | + predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) { |
| 27 | + LI::isAdditionalFlowStep(node1, node2) |
26 | 28 | } |
27 | | - |
28 | | - import TaintTracking::Global<Config> |
29 | 29 | } |
| 30 | + |
| 31 | +/** |
| 32 | + * Taint-tracking for detecting LDAP Injections vulnerabilities. |
| 33 | + */ |
| 34 | +module LdapInjectionFlow = TaintTracking::Global<LdapInjectionConfig>; |
0 commit comments