JS: Support react-native-base64

asgerf · asgerf · commit 51f489211bd8 · 2021-03-25T09:00:10.000Z
diff --git a/javascript/ql/src/semmle/javascript/Base64.qll b/javascript/ql/src/semmle/javascript/Base64.qll
@@ -150,7 +150,8 @@ private class NpmBase64Encode extends Base64::Encode::Range, DataFlow::CallNode
       enc = DataFlow::moduleMember("base64url", "toBase64") or
       enc = DataFlow::moduleMember("js-base64", "Base64").getAPropertyRead("encode") or
       enc = DataFlow::moduleMember("js-base64", "Base64").getAPropertyRead("encodeURI") or
-      enc = DataFlow::moduleMember("urlsafe-base64", "encode")
+      enc = DataFlow::moduleMember("urlsafe-base64", "encode") or
+      enc = DataFlow::moduleMember("react-native-base64", ["encode", "encodeFromByteArray"])
     |
       this = enc.getACall()
     )
@@ -186,7 +187,8 @@ private class NpmBase64Decode extends Base64::Decode::Range, DataFlow::CallNode
       dec = DataFlow::moduleMember("base64url", "decode") or
       dec = DataFlow::moduleMember("base64url", "fromBase64") or
       dec = DataFlow::moduleMember("js-base64", "Base64").getAPropertyRead("decode") or
-      dec = DataFlow::moduleMember("urlsafe-base64", "decode")
+      dec = DataFlow::moduleMember("urlsafe-base64", "decode") or
+      dec = DataFlow::moduleMember("react-native-base64", "decode")
     |
       this = dec.getACall()
     )

Original file line number	Diff line number	Diff line change
`@@ -150,7 +150,8 @@ private class NpmBase64Encode extends Base64::Encode::Range, DataFlow::CallNode`
`150`	`150`	`enc = DataFlow::moduleMember("base64url", "toBase64") or`
`151`	`151`	`enc = DataFlow::moduleMember("js-base64", "Base64").getAPropertyRead("encode") or`
`152`	`152`	`enc = DataFlow::moduleMember("js-base64", "Base64").getAPropertyRead("encodeURI") or`
`153`		`- enc = DataFlow::moduleMember("urlsafe-base64", "encode")`
	`153`	`+ enc = DataFlow::moduleMember("urlsafe-base64", "encode") or`
	`154`	`+ enc = DataFlow::moduleMember("react-native-base64", ["encode", "encodeFromByteArray"])`
`154`	`155`	`\|`
`155`	`156`	`this = enc.getACall()`
`156`	`157`	`)`
`@@ -186,7 +187,8 @@ private class NpmBase64Decode extends Base64::Decode::Range, DataFlow::CallNode`
`186`	`187`	`dec = DataFlow::moduleMember("base64url", "decode") or`
`187`	`188`	`dec = DataFlow::moduleMember("base64url", "fromBase64") or`
`188`	`189`	`dec = DataFlow::moduleMember("js-base64", "Base64").getAPropertyRead("decode") or`
`189`		`- dec = DataFlow::moduleMember("urlsafe-base64", "decode")`
	`190`	`+ dec = DataFlow::moduleMember("urlsafe-base64", "decode") or`
	`191`	`+ dec = DataFlow::moduleMember("react-native-base64", "decode")`
`190`	`192`	`\|`
`191`	`193`	`this = dec.getACall()`
`192`	`194`	`)`