Sinks.qll

private import python
private import semmle.python.dataflow.new.DataFlow
private import meta.MetaMetrics
import semmle.python.security.dataflow.CleartextLoggingCustomizations
import semmle.python.security.dataflow.CleartextStorageCustomizations
import semmle.python.security.dataflow.CodeInjectionCustomizations
import semmle.python.security.dataflow.CommandInjectionCustomizations
import semmle.python.security.dataflow.LdapInjectionCustomizations
import semmle.python.security.dataflow.LogInjectionCustomizations
import semmle.python.security.dataflow.NoSqlInjectionCustomizations
import semmle.python.security.dataflow.PathInjectionCustomizations
import semmle.python.security.dataflow.PolynomialReDoSCustomizations
import semmle.python.security.dataflow.ReflectedXSSCustomizations
import semmle.python.security.dataflow.RegexInjectionCustomizations
import semmle.python.security.dataflow.ServerSideRequestForgeryCustomizations
import semmle.python.security.dataflow.SqlInjectionCustomizations
import semmle.python.security.dataflow.StackTraceExposureCustomizations
import semmle.python.security.dataflow.TarSlipCustomizations
import semmle.python.security.dataflow.UnsafeDeserializationCustomizations
import semmle.python.security.dataflow.UrlRedirectCustomizations
import semmle.python.security.dataflow.WeakSensitiveDataHashingCustomizations
import semmle.python.security.dataflow.XmlBombCustomizations
import semmle.python.security.dataflow.XpathInjectionCustomizations
import semmle.python.security.dataflow.XxeCustomizations

DataFlow::Node taintSink(string kind) {
  not result.getLocation().getFile() instanceof IgnoredFile and
  (
    kind = "CleartextLogging" and result instanceof CleartextLogging::Sink
    or
    kind = "CleartextStorage" and result instanceof CleartextStorage::Sink
    or
    kind = "CodeInjection" and result instanceof CodeInjection::Sink
    or
    kind = "CommandInjection" and result instanceof CommandInjection::Sink
    or
    kind = "LdapInjection (DN)" and result instanceof LdapInjection::DnSink
    or
    kind = "LdapInjection (Filter)" and result instanceof LdapInjection::FilterSink
    or
    kind = "LogInjection" and result instanceof LogInjection::Sink
    or
    kind = "PathInjection" and result instanceof PathInjection::Sink
    or
    kind = "PolynomialReDoS" and result instanceof PolynomialReDoS::Sink
    or
    kind = "ReflectedXss" and result instanceof ReflectedXss::Sink
    or
    kind = "RegexInjection" and result instanceof RegexInjection::Sink
    or
    kind = "NoSqlInjection (string sink)" and result instanceof NoSqlInjection::StringSink
    or
    kind = "NoSqlInjection (dict sink)" and result instanceof NoSqlInjection::DictSink
    or
    kind = "ServerSideRequestForgery" and result instanceof ServerSideRequestForgery::Sink
    or
    kind = "SqlInjection" and result instanceof SqlInjection::Sink
    or
    kind = "StackTraceExposure" and result instanceof StackTraceExposure::Sink
    or
    kind = "TarSlip" and result instanceof TarSlip::Sink
    or
    kind = "UnsafeDeserialization" and result instanceof UnsafeDeserialization::Sink
    or
    kind = "UrlRedirect" and result instanceof UrlRedirect::Sink
    or
    kind = "WeakSensitiveDataHashing (NormalHashFunction)" and
    result instanceof NormalHashFunction::Sink
    or
    kind = "WeakSensitiveDataHashing (ComputationallyExpensiveHashFunction)" and
    result instanceof ComputationallyExpensiveHashFunction::Sink
    or
    kind = "XmlBomb" and result instanceof XmlBomb::Sink
    or
    kind = "XpathInjection" and result instanceof XpathInjection::Sink
    or
    kind = "Xxe" and result instanceof Xxe::Sink
  )
}