Merge branch 'python-port-insecure-protocol' of github.com:yoff/codeql into python-port-insecure-protocol

yoff · yoff · commit f14fb3bf9ee9 · 2021-03-26T08:06:51.000+01:00
diff --git a/python/ql/src/Security/CWE-327/FluentApiModel.qll b/python/ql/src/Security/CWE-327/FluentApiModel.qll
@@ -39,13 +39,7 @@ class InsecureContextConfiguration extends DataFlow::Configuration {
     )
   }
 
-  override predicate isBarrierIn(DataFlow::Node node) {
-    exists(ProtocolUnrestriction r |
-      r = library.protocol_unrestriction() and
-      node = r.getContext() and
-      r.getUnrestriction() = tracked_version
-    )
-  }
+  override predicate isBarrierIn(DataFlow::Node node) { this.isSource(node) }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -39,13 +39,7 @@ class InsecureContextConfiguration extends DataFlow::Configuration {`
`39`	`39`	`)`
`40`	`40`	`}`
`41`	`41`
`42`		`- override predicate isBarrierIn(DataFlow::Node node) {`
`43`		`- exists(ProtocolUnrestriction r \|`
`44`		`- r = library.protocol_unrestriction() and`
`45`		`- node = r.getContext() and`
`46`		`- r.getUnrestriction() = tracked_version`
`47`		`- )`
`48`		`- }`
	`42`	`+ override predicate isBarrierIn(DataFlow::Node node) { this.isSource(node) }`
`49`	`43`	`}`
`50`	`44`
`51`	`45`	`/**`