Skip to content

Commit fd836f5

Browse files
Rust: Add neutral models for spurious actix-web connection_info sink models
1 parent b659cc8 commit fd836f5

5 files changed

Lines changed: 255 additions & 316 deletions

File tree

‎rust/ql/lib/codeql/rust/frameworks/actix-web.model.yml‎

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,4 +15,15 @@ extensions:
1515
pack: codeql/rust-all
1616
extensible: summaryModel
1717
data:
18-
- ["<actix_web::types::path::Path>::into_inner", "Argument[self]", "ReturnValue", "taint", "manual"]
18+
- ["<actix_web::types::path::Path>::into_inner", "Argument[self]", "ReturnValue", "taint", "manual"]
19+
- addsTo:
20+
pack: codeql/rust-all
21+
extensible: neutralModel
22+
data:
23+
- ["<actix_web::info::ConnectionInfo as actix_web::extract::FromRequest>::from_request", "sink", "manual"]
24+
- ["<actix_web::request::HttpRequest>::connection_info", "sink", "manual"]
25+
- ["<actix_web::request::HttpRequest>::full_url", "sink", "manual"]
26+
- ["<actix_web::request::HttpRequest>::url_for", "sink", "manual"]
27+
- ["<actix_web::request::HttpRequest>::url_for_static", "sink", "manual"]
28+
- ["<actix_web::rmap::ResourceMap>::url_for", "sink", "manual"]
29+
- ["<actix_web::service::ServiceRequest>::connection_info", "sink", "manual"]

0 commit comments

Comments
 (0)