| @@ -1,4 +1,6 @@ | ||
| 1 | +// a query | |
| 2 | + | |
| 1 | 3 | /** |
| 2 | 4 | * @name LDAP query built from user-controlled sources |
| 3 | 5 | * @description Building an LDAP query from user-controlled sources is vulnerable to insertion of |
| 4 | 6 | * malicious LDAP code by the user. |
| @@ -4,10 +6,10 @@ | ||
| 4 | 6 | * malicious LDAP code by the user. |
| 5 | 7 | * @kind path-problem |
| 6 | 8 | * @problem.severity error |
| 7 | 9 | * @id py/ldap-injection |
| 8 | - * @tags experimental | |
| 9 | - * security | |
| 10 | + * @tags experimental | |
| 11 | + * security | |
| 10 | 12 | * external/cwe/cwe-090 |
| 11 | 13 | */ |
| 12 | 14 | |
| 13 | 15 | import python |
| @@ -98,5 +100,5 @@ | ||
| 98 | 100 | sanitizer = any(LDAPEscape ldapEsc).getAnInput() |
| 99 | 101 | } |
| 100 | 102 | } |
| 101 | 103 | |
| 102 | -// From https://github.com/github/codeql/pull/5443/files | |
| 104 | +// From https://github.com/github/codeql/pull/5443/files | |
