PluginProbe
Code Block Pro – Beautiful Syntax Highlighting / 1.28.0
Code Block Pro – Beautiful Syntax Highlighting v1.28.0
1.27.1 1.27.2 1.27.3 1.27.4 1.27.5 1.27.6 1.27.7 1.28.0 1.3.0 1.4.0 1.5.0 1.5.1 1.5.2 1.6.0 1.7.0 1.8.0 1.9.0 1.9.1 1.9.2 1.9.3 trunk 1.1.0 1.10.0 1.11.0 1.11.1 All 63 releases
← All changes | build/shiki/samples/codeql.sample +3 -5 1.9.11.28.0 View file →
@@ -1,6 +1,4 @@
1 -// a query
2 -
3 1 /**
4 2 * @name LDAP query built from user-controlled sources
5 3 * @description Building an LDAP query from user-controlled sources is vulnerable to insertion of
6 4 * malicious LDAP code by the user.
@@ -6,10 +4,10 @@
6 4 * malicious LDAP code by the user.
7 5 * @kind path-problem
8 6 * @problem.severity error
9 7 * @id py/ldap-injection
10 - * @tags experimental
11 - * security
8 + * @tags experimental
9 + * security
12 10 * external/cwe/cwe-090
13 11 */
14 12
15 13 import python
@@ -100,5 +98,5 @@
100 98 sanitizer = any(LDAPEscape ldapEsc).getAnInput()
101 99 }
102 100 }
103 101
104 -// From https://github.com/github/codeql/pull/5443/files
102 +// From https://github.com/github/codeql/pull/5443/files