Thanks to visit codestin.com
Credit goes to github.com

Skip to content
This repository was archived by the owner on Jan 5, 2023. It is now read-only.
Merged
Changes from 1 commit
Commits
Show all changes
28 commits
Select commit Hold shift + click to select a range
6d9b7d3
Add web framework: clevergo
gagliardetto Dec 20, 2020
1bfe395
Remove `import DataFlow::PathGraph`
gagliardetto Dec 20, 2020
dfbad0e
Regenerate code implementing the code review feedback
gagliardetto Jan 5, 2021
7c62c63
codeql: add packagePath predicate
gagliardetto Jan 5, 2021
c4ee617
Add back bindingset to packagePath
gagliardetto Jan 5, 2021
11326eb
Update ql/src/semmle/go/frameworks/CleverGo.qll
gagliardetto Jan 5, 2021
34dcf83
Fix module doc
gagliardetto Jan 6, 2021
928c12d
Simplify UntrustedSources methods
gagliardetto Jan 23, 2021
a90f609
Manually add packagePath() predicate
gagliardetto Jan 23, 2021
a6c1acf
Fix imports
gagliardetto Jan 23, 2021
54abdf1
Regenerate tests
gagliardetto Jan 23, 2021
c01259e
Simplify UntrustedSources interface methods
gagliardetto Jan 23, 2021
d3d7d2d
Simplify UntrustedSources struct fields
gagliardetto Jan 23, 2021
bdc5f90
Cleanup comments
gagliardetto Jan 23, 2021
f95f353
Cleanup comments
gagliardetto Jan 23, 2021
0c1ae62
Use //go:generate depstubber --vendor --auto
gagliardetto Jan 23, 2021
1de7196
Regenerate dep stubs
gagliardetto Jan 23, 2021
55c8d9b
Make naming more consistent
gagliardetto Jan 23, 2021
c53d8d3
Add http redirect model
gagliardetto Jan 25, 2021
98b3cc2
Fix autoformatting
gagliardetto Jan 25, 2021
0fe7050
Add models for HTTP::ResponseBody
gagliardetto Jan 27, 2021
93ff245
Use docs instead of comments for classes.
gagliardetto Jan 27, 2021
7edf739
Model HTTP::HeaderWrite; regenerate stubs
gagliardetto Feb 5, 2021
8c18aa6
Simplify HTTP::HeaderWrite
gagliardetto Feb 5, 2021
3915305
Refactor and improve HTTP:ResponseBody models and tests
gagliardetto Feb 9, 2021
7ea0434
Move clevergo framework to experimental
gagliardetto Apr 7, 2021
4ae5bdb
Improve naming of files and elements.
gagliardetto Apr 8, 2021
8e839f3
Put all tests file in to the CleverGo folder instead of having dedica…
gagliardetto Apr 8, 2021
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Simplify HTTP::HeaderWrite
  • Loading branch information
gagliardetto authored and smowton committed Apr 9, 2021
commit 8c18aa6cbda52f4aad842fa4618cf7398abe5eb9
18 changes: 5 additions & 13 deletions ql/src/semmle/go/frameworks/CleverGo.qll
Original file line number Diff line number Diff line change
Expand Up @@ -287,26 +287,18 @@ private module CleverGo {
}

/**
* Models HTTP header writes.
* Models HTTP header writers model for package: clevergo.tech/[email protected]
*/
private class HeaderWrite extends HTTP::HeaderWrite::Range, DataFlow::CallNode {
DataFlow::Node nameNode;
DataFlow::Node valueNode;

HeaderWrite() {
// HTTP header write model for package: clevergo.tech/[email protected]
// Receiver type: Context
(
// signature: func (*Context).SetHeader(key string, value string)
this = any(Method m | m.hasQualifiedName(packagePath(), "Context", "SetHeader")).getACall() and
nameNode = this.getArgument(0) and
valueNode = this.getArgument(1)
)
// signature: func (*Context).SetHeader(key string, value string)
this = any(Method m | m.hasQualifiedName(packagePath(), "Context", "SetHeader")).getACall()
}

override DataFlow::Node getName() { result = nameNode }
override DataFlow::Node getName() { result = this.getArgument(0) }

override DataFlow::Node getValue() { result = valueNode }
override DataFlow::Node getValue() { result = this.getArgument(1) }

override HTTP::ResponseWriter getResponseWriter() { none() }
}
Expand Down