style:move all source files under src/experimental & feat:modify source regular matching rules

liangjinhuang · liangjinhuang · commit 976e484c57a9 · 2022-02-02T01:14:51.000+08:00
diff --git a/python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql b/python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql
@@ -13,11 +13,11 @@
  */
 
 import python
-import semmle.python.security.dataflow.InsecureRandomness::InsecureRandomness
+import experimental.semmle.python.security.InsecureRandomness::InsecureRandomness
 import semmle.python.dataflow.new.DataFlow
 import DataFlow::PathGraph
 
 from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
 where cfg.hasFlowPath(source, sink)
 select sink.getNode(), source, sink, "Cryptographically insecure $@ in a security context.",
-  source.getNode(), "random value"
+  source.getNode(), "random value"
diff --git a/python/ql/src/experimental/semmle/python/security/InsecureRandomness.qll b/python/ql/src/experimental/semmle/python/security/InsecureRandomness.qll
diff --git a/python/ql/src/experimental/semmle/python/security/InsecureRandomnessCustomizations.qll b/python/ql/src/experimental/semmle/python/security/InsecureRandomnessCustomizations.qll
@@ -58,7 +58,7 @@ module InsecureRandomness {
   class RandomFnSink extends Sink {
     RandomFnSink() {
       exists(DataFlowCallable randomFn |
-        randomFn.getName().regexpMatch("(?i).*(gen(erate)?|make|mk|create).*(nonce|salt|pepper).*")
+        randomFn.getName().regexpMatch("(?i).*(gen(erate)?|make|mk|create).*(nonce|salt|pepper|Password).*")
       |
         this.getEnclosingCallable() = randomFn
       )

Original file line number	Diff line number	Diff line change
`@@ -58,7 +58,7 @@ module InsecureRandomness {`
`58`	`58`	`class RandomFnSink extends Sink {`
`59`	`59`	`RandomFnSink() {`
`60`	`60`	`exists(DataFlowCallable randomFn \|`
`61`		`- randomFn.getName().regexpMatch("(?i).(gen(erate)?\|make\|mk\|create).(nonce\|salt\|pepper).*")`
	`61`	`+ randomFn.getName().regexpMatch("(?i).(gen(erate)?\|make\|mk\|create).(nonce\|salt\|pepper\|Password).*")`
`62`	`62`	`\|`
`63`	`63`	`this.getEnclosingCallable() = randomFn`
`64`	`64`	`)`