| @@ -1,6 +1,4 @@ | ||
| 1 | -// a query | |
| 2 | - | |
| 3 | 1 | /** |
| 4 | 2 | * @name LDAP query built from user-controlled sources |
| 5 | 3 | * @description Building an LDAP query from user-controlled sources is vulnerable to insertion of |
| 6 | 4 | * malicious LDAP code by the user. |
| @@ -6,10 +4,10 @@ | ||
| 6 | 4 | * malicious LDAP code by the user. |
| 7 | 5 | * @kind path-problem |
| 8 | 6 | * @problem.severity error |
| 9 | 7 | * @id py/ldap-injection |
| 10 | - * @tags experimental | |
| 11 | - * security | |
| 8 | + * @tags experimental | |
| 9 | + * security | |
| 12 | 10 | * external/cwe/cwe-090 |
| 13 | 11 | */ |
| 14 | 12 | |
| 15 | 13 | import python |
| @@ -100,5 +98,5 @@ | ||
| 100 | 98 | sanitizer = any(LDAPEscape ldapEsc).getAnInput() |
| 101 | 99 | } |
| 102 | 100 | } |
| 103 | 101 | |
| 104 | -// From https://github.com/github/codeql/pull/5443/files | |
| 102 | +// From https://github.com/github/codeql/pull/5443/files | |