Skip to content

Commit f6da030

Browse files
asgerfasgerf
committed
JS: Migrate to *Query.qll convention
1 parent 8fe2a43 commit f6da030

File tree

164 files changed

+2831
-2633
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

164 files changed

+2831
-2633
lines changed

‎javascript/ql/src/Security/CWE-020/ExternalAPIsUsedWithUntrustedData.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
*/
1010

1111
import javascript
12-
import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedData::ExternalAPIUsedWithUntrustedData
12+
import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedDataQuery
1313

1414
from ExternalAPIUsedWithUntrustedData externalAPI
1515
select externalAPI, count(externalAPI.getUntrustedDataNode()) as numberOfUses,

‎javascript/ql/src/Security/CWE-020/UntrustedDataToExternalAPI.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@
1010
*/
1111

1212
import javascript
13-
import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedData::ExternalAPIUsedWithUntrustedData
13+
import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedDataQuery
1414
import DataFlow::PathGraph
1515

1616
from Configuration config, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-022/TaintedPath.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@
1616
*/
1717

1818
import javascript
19-
import semmle.javascript.security.dataflow.TaintedPath::TaintedPath
19+
import semmle.javascript.security.dataflow.TaintedPathQuery
2020
import DataFlow::PathGraph
2121

2222
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-022/ZipSlip.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.ZipSlip::ZipSlip
16+
import semmle.javascript.security.dataflow.ZipSlipQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-073/TemplateObjectInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313

1414
import javascript
1515
import DataFlow::PathGraph
16-
import semmle.javascript.security.dataflow.TemplateObjectInjection::TemplateObjectInjection
16+
import semmle.javascript.security.dataflow.TemplateObjectInjectionQuery
1717

1818
from DataFlow::Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
1919
where cfg.hasFlowPath(source, sink)

‎javascript/ql/src/Security/CWE-078/CommandInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.CommandInjection::CommandInjection
17+
import semmle.javascript.security.dataflow.CommandInjectionQuery
1818
import DataFlow::PathGraph
1919

2020
from

‎javascript/ql/src/Security/CWE-078/IndirectCommandInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@
1616

1717
import javascript
1818
import DataFlow::PathGraph
19-
import semmle.javascript.security.dataflow.IndirectCommandInjection::IndirectCommandInjection
19+
import semmle.javascript.security.dataflow.IndirectCommandInjectionQuery
2020

2121
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, DataFlow::Node highlight
2222
where

‎javascript/ql/src/Security/CWE-078/ShellCommandInjectionFromEnvironment.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515

1616
import javascript
1717
import DataFlow::PathGraph
18-
import semmle.javascript.security.dataflow.ShellCommandInjectionFromEnvironment::ShellCommandInjectionFromEnvironment
18+
import semmle.javascript.security.dataflow.ShellCommandInjectionFromEnvironmentQuery
1919

2020
from
2121
Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, DataFlow::Node highlight,

‎javascript/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.UnsafeShellCommandConstruction::UnsafeShellCommandConstruction
17+
import semmle.javascript.security.dataflow.UnsafeShellCommandConstructionQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, Sink sinkNode

‎javascript/ql/src/Security/CWE-079/ExceptionXss.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.ExceptionXss::ExceptionXss
16+
import semmle.javascript.security.dataflow.ExceptionXssQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-079/ReflectedXss.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.ReflectedXss::ReflectedXss
16+
import semmle.javascript.security.dataflow.ReflectedXssQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-079/StoredXss.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.StoredXss::StoredXss
16+
import semmle.javascript.security.dataflow.StoredXssQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-079/UnsafeHtmlConstruction.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414

1515
import javascript
1616
import DataFlow::PathGraph
17-
import semmle.javascript.security.dataflow.UnsafeHtmlConstruction::UnsafeHtmlConstruction
17+
import semmle.javascript.security.dataflow.UnsafeHtmlConstructionQuery
1818

1919
from DataFlow::Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, Sink sinkNode
2020
where cfg.hasFlowPath(source, sink) and sink.getNode() = sinkNode

‎javascript/ql/src/Security/CWE-079/UnsafeJQueryPlugin.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.UnsafeJQueryPlugin::UnsafeJQueryPlugin
16+
import semmle.javascript.security.dataflow.UnsafeJQueryPluginQuery
1717
import DataFlow::PathGraph
1818

1919
from

‎javascript/ql/src/Security/CWE-079/Xss.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.DomBasedXss::DomBasedXss
16+
import semmle.javascript.security.dataflow.DomBasedXssQuery
1717
import DataFlow::PathGraph
1818

1919
from DataFlow::Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-079/XssThroughDom.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.XssThroughDom::XssThroughDom
16+
import semmle.javascript.security.dataflow.XssThroughDomQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-094/CodeInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.CodeInjection::CodeInjection
17+
import semmle.javascript.security.dataflow.CodeInjectionQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-094/ImproperCodeSanitization.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.ImproperCodeSanitization::ImproperCodeSanitization
16+
import semmle.javascript.security.dataflow.ImproperCodeSanitizationQuery
1717
import DataFlow::PathGraph
1818
private import semmle.javascript.heuristics.HeuristicSinks
1919
private import semmle.javascript.security.dataflow.CodeInjectionCustomizations

‎javascript/ql/src/Security/CWE-094/UnsafeDynamicMethodAccess.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
*/
1212

1313
import javascript
14-
import semmle.javascript.security.dataflow.UnsafeDynamicMethodAccess::UnsafeDynamicMethodAccess
14+
import semmle.javascript.security.dataflow.UnsafeDynamicMethodAccessQuery
1515
import DataFlow::PathGraph
1616

1717
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@
1616

1717
import javascript
1818
import DataFlow::PathGraph
19-
import semmle.javascript.security.dataflow.IncompleteHtmlAttributeSanitization::IncompleteHtmlAttributeSanitization
19+
import semmle.javascript.security.dataflow.IncompleteHtmlAttributeSanitizationQuery
2020
import semmle.javascript.security.IncompleteBlacklistSanitizer
2121

2222
/**

‎javascript/ql/src/Security/CWE-117/LogInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313

1414
import javascript
1515
import DataFlow::PathGraph
16-
import semmle.javascript.security.dataflow.LogInjection::LogInjection
16+
import semmle.javascript.security.dataflow.LogInjectionQuery
1717

1818
from LogInjectionConfiguration config, DataFlow::PathNode source, DataFlow::PathNode sink
1919
where config.hasFlowPath(source, sink)

‎javascript/ql/src/Security/CWE-134/TaintedFormatString.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
*/
1212

1313
import javascript
14-
import semmle.javascript.security.dataflow.TaintedFormatString::TaintedFormatString
14+
import semmle.javascript.security.dataflow.TaintedFormatStringQuery
1515
import DataFlow::PathGraph
1616

1717
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-200/FileAccessToHttp.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
*/
1212

1313
import javascript
14-
import semmle.javascript.security.dataflow.FileAccessToHttp::FileAccessToHttp
14+
import semmle.javascript.security.dataflow.FileAccessToHttpQuery
1515
import DataFlow::PathGraph
1616

1717
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-201/PostMessageStar.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.PostMessageStar::PostMessageStar
17+
import semmle.javascript.security.dataflow.PostMessageStarQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-209/StackTraceExposure.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.StackTraceExposure::StackTraceExposure
16+
import semmle.javascript.security.dataflow.StackTraceExposureQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-312/BuildArtifactLeak.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.BuildArtifactLeak::BuildArtifactLeak
17+
import semmle.javascript.security.dataflow.BuildArtifactLeakQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-312/CleartextLogging.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.CleartextLogging::CleartextLogging
17+
import semmle.javascript.security.dataflow.CleartextLoggingQuery
1818
import DataFlow::PathGraph
1919

2020
/**

‎javascript/ql/src/Security/CWE-312/CleartextStorage.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.CleartextStorage::CleartextStorage
17+
import semmle.javascript.security.dataflow.CleartextStorageQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
*/
1212

1313
import javascript
14-
import semmle.javascript.security.dataflow.BrokenCryptoAlgorithm::BrokenCryptoAlgorithm
14+
import semmle.javascript.security.dataflow.BrokenCryptoAlgorithmQuery
1515
import semmle.javascript.security.SensitiveActions
1616
import DataFlow::PathGraph
1717

‎javascript/ql/src/Security/CWE-338/InsecureRandomness.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.InsecureRandomness::InsecureRandomness
16+
import semmle.javascript.security.dataflow.InsecureRandomnessQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-346/CorsMisconfigurationForCredentials.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import javascript
15-
import semmle.javascript.security.dataflow.CorsMisconfigurationForCredentials::CorsMisconfigurationForCredentials
15+
import semmle.javascript.security.dataflow.CorsMisconfigurationForCredentialsQuery
1616
import DataFlow::PathGraph
1717

1818
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-400/DeepObjectResourceExhaustion.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212

1313
import javascript
1414
import DataFlow::PathGraph
15-
import semmle.javascript.security.dataflow.DeepObjectResourceExhaustion::DeepObjectResourceExhaustion
15+
import semmle.javascript.security.dataflow.DeepObjectResourceExhaustionQuery
1616

1717
from
1818
Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, DataFlow::Node link,

‎javascript/ql/src/Security/CWE-400/RemotePropertyInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.RemotePropertyInjection::RemotePropertyInjection
16+
import semmle.javascript.security.dataflow.RemotePropertyInjectionQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-502/UnsafeDeserialization.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import javascript
15-
import semmle.javascript.security.dataflow.UnsafeDeserialization::UnsafeDeserialization
15+
import semmle.javascript.security.dataflow.UnsafeDeserializationQuery
1616
import DataFlow::PathGraph
1717

1818
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-506/HardcodedDataInterpretedAsCode.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.HardcodedDataInterpretedAsCode::HardcodedDataInterpretedAsCode
16+
import semmle.javascript.security.dataflow.HardcodedDataInterpretedAsCodeQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-601/ClientSideUrlRedirect.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.ClientSideUrlRedirect::ClientSideUrlRedirect
17+
import semmle.javascript.security.dataflow.ClientSideUrlRedirectQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-601/ServerSideUrlRedirect.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import javascript
15-
import semmle.javascript.security.dataflow.ServerSideUrlRedirect::ServerSideUrlRedirect
15+
import semmle.javascript.security.dataflow.ServerSideUrlRedirectQuery
1616
import DataFlow::PathGraph
1717

1818
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-611/Xxe.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.Xxe::Xxe
16+
import semmle.javascript.security.dataflow.XxeQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-640/HostHeaderPoisoningInEmailGeneration.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import javascript
15-
import semmle.javascript.security.dataflow.HostHeaderPoisoningInEmailGeneration::HostHeaderPoisoningInEmailGeneration
15+
import semmle.javascript.security.dataflow.HostHeaderPoisoningInEmailGenerationQuery
1616
import DataFlow::PathGraph
1717

1818
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-643/XpathInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import javascript
15-
import semmle.javascript.security.dataflow.XpathInjection::XpathInjection
15+
import semmle.javascript.security.dataflow.XpathInjectionQuery
1616
import DataFlow::PathGraph
1717

1818
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-730/RegExpInjection.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
import semmle.javascript.security.dataflow.RegExpInjection::RegExpInjection
17+
import semmle.javascript.security.dataflow.RegExpInjectionQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-754/UnvalidatedDynamicMethodCall.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import javascript
15-
import semmle.javascript.security.dataflow.UnvalidatedDynamicMethodCall::UnvalidatedDynamicMethodCall
15+
import semmle.javascript.security.dataflow.UnvalidatedDynamicMethodCallQuery
1616
import DataFlow::PathGraph
1717

1818
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-776/XmlBomb.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import javascript
16-
import semmle.javascript.security.dataflow.XmlBomb::XmlBomb
16+
import semmle.javascript.security.dataflow.XmlBombQuery
1717
import DataFlow::PathGraph
1818

1919
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink

‎javascript/ql/src/Security/CWE-798/HardcodedCredentials.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import javascript
17-
private import semmle.javascript.security.dataflow.HardcodedCredentials::HardcodedCredentials
17+
import semmle.javascript.security.dataflow.HardcodedCredentialsQuery
1818
import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink, string value

0 commit comments

Comments
 (0)