Skip to content

Commit cba1c58

Browse files
committed
feat(rust): Add ModelsAsDataSinks for SQL Injection
1 parent 2d0c73a commit cba1c58

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

rust/ql/lib/codeql/rust/security/SqlInjectionExtensions.qll

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@
66

77
import rust
88
private import codeql.rust.dataflow.DataFlow
9+
private import codeql.rust.dataflow.internal.DataFlowImpl
910
private import codeql.rust.Concepts
1011
private import codeql.util.Unit
1112

@@ -47,4 +48,11 @@ module SqlInjection {
4748
class SqlExecutionAsSink extends Sink {
4849
SqlExecutionAsSink() { this = any(SqlExecution e).getSql() }
4950
}
51+
52+
/** A sink for sql-injection from model data. */
53+
private class ModelsAsDataSinks extends Sink {
54+
ModelsAsDataSinks() {
55+
sinkNode(this, "sql-injection")
56+
}
57+
}
5058
}

0 commit comments

Comments
 (0)