CodeQL library for Python

codeql/python-all 4.0.7 (changelog, source)

Module LdapInjection

Provides default sources, sinks and sanitizers for detecting “ldap injection” vulnerabilities, as well as extension points for adding your own.

Import path

import semmle.python.security.dataflow.LdapInjectionCustomizations

Classes

ConstCompareAsDnSanitizerGuard	A comparison with a constant, considered as a sanitizer-guard.
ConstCompareAsFilterSanitizerGuard	A comparison with a constant, considered as a sanitizer-guard.
DnSanitizer	A sanitizer for “ldap injection” vulnerabilities.
DnSink	A data flow sink for “ldap injection” vulnerabilities.
FilterSanitizer	A sanitizer for “ldap injection” vulnerabilities.
FilterSink	A data flow sink for “ldap injection” vulnerabilities.
LdapDnEscapingSanitizer	A call to replace line breaks functions as a sanitizer.
LdapExecutionAsDnSink	A logging operation, considered as a flow sink.
LdapExecutionAsFilterSink	A logging operation, considered as a flow sink.
LdapFilterEscapingSanitizer	A call to replace line breaks functions as a sanitizer.
RemoteFlowSourceAsSource	DEPRECATED: Use `ActiveThreatModelSource` from Concepts instead!
Source	A data flow source for “ldap injection” vulnerabilities.

Aliases

StringConstCompareAsFilterSanitizerGuard	DEPRECATED: Use ConstCompareAsFilterSanitizerGuard instead.
StringConstCompareAsSanitizerGuard	DEPRECATED: Use ConstCompareAsDnSanitizerGuard instead.