Skip to content

Commit 2baca58

Browse files
committed
Removed deprecations from cors as it was moved out experimental
1 parent fd4233e commit 2baca58

File tree

2 files changed

+0
-61
lines changed

2 files changed

+0
-61
lines changed

javascript/ql/lib/semmle/javascript/security/CorsPermissiveConfigurationCustomizations.qll

Lines changed: 0 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -24,22 +24,10 @@ module CorsPermissiveConfiguration {
2424
or
2525
this = TWildcard() and result = "wildcard"
2626
}
27-
28-
/** DEPRECATED: Converts this flow state to a flow label. */
29-
deprecated DataFlow::FlowLabel toFlowLabel() {
30-
this = TTaint() and result.isTaint()
31-
or
32-
this = TTrueOrNull() and result instanceof TrueAndNull
33-
or
34-
this = TWildcard() and result instanceof Wildcard
35-
}
3627
}
3728

3829
/** Predicates for working with flow states. */
3930
module FlowState {
40-
/** DEPRECATED: Gets a flow state from a flow label. */
41-
deprecated FlowState fromFlowLabel(DataFlow::FlowLabel label) { result.toFlowLabel() = label }
42-
4331
/** A tainted value. */
4432
FlowState taint() { result = TTaint() }
4533

@@ -65,34 +53,13 @@ module CorsPermissiveConfiguration {
6553
*/
6654
abstract class Sanitizer extends DataFlow::Node { }
6755

68-
/**
69-
* DEPRECATED: Use `ActiveThreatModelSource` from Concepts instead!
70-
*/
71-
deprecated class RemoteFlowSourceAsSource = ActiveThreatModelSourceAsSource;
72-
7356
/**
7457
* An active threat-model source, considered as a flow source.
7558
*/
7659
private class ActiveThreatModelSourceAsSource extends Source instanceof ActiveThreatModelSource {
7760
ActiveThreatModelSourceAsSource() { not this instanceof ClientSideRemoteFlowSource }
7861
}
7962

80-
/** A flow label representing `true` and `null` values. */
81-
abstract deprecated class TrueAndNull extends DataFlow::FlowLabel {
82-
TrueAndNull() { this = "TrueAndNull" }
83-
}
84-
85-
/** DEPRECATED: Gets a flow label representing `true` and `null` values. */
86-
deprecated TrueAndNull truenullLabel() { any() }
87-
88-
/** A flow label representing `*` value. */
89-
abstract deprecated class Wildcard extends DataFlow::FlowLabel {
90-
Wildcard() { this = "Wildcard" }
91-
}
92-
93-
/** DEPRECATED: Gets a flow label representing `*` value. */
94-
deprecated Wildcard wildcardLabel() { any() }
95-
9663
/** An overly permissive value for `origin` (Apollo) */
9764
class TrueNullValue extends Source {
9865
TrueNullValue() { this.mayHaveBooleanValue(true) or this.asExpr() instanceof NullLiteral }

javascript/ql/lib/semmle/javascript/security/CorsPermissiveConfigurationQuery.qll

Lines changed: 0 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -39,31 +39,3 @@ module CorsPermissiveConfigurationConfig implements DataFlow::StateConfigSig {
3939

4040
module CorsPermissiveConfigurationFlow =
4141
TaintTracking::GlobalWithState<CorsPermissiveConfigurationConfig>;
42-
43-
/**
44-
* DEPRECATED. Use the `CorsPermissiveConfigurationFlow` module instead.
45-
*/
46-
deprecated class Configuration extends TaintTracking::Configuration {
47-
Configuration() { this = "CorsPermissiveConfiguration" }
48-
49-
override predicate isSource(DataFlow::Node source, DataFlow::FlowLabel label) {
50-
CorsPermissiveConfigurationConfig::isSource(source, FlowState::fromFlowLabel(label))
51-
}
52-
53-
override predicate isSink(DataFlow::Node sink, DataFlow::FlowLabel label) {
54-
CorsPermissiveConfigurationConfig::isSink(sink, FlowState::fromFlowLabel(label))
55-
}
56-
57-
override predicate isSanitizer(DataFlow::Node node) {
58-
super.isSanitizer(node) or
59-
CorsPermissiveConfigurationConfig::isBarrier(node)
60-
}
61-
}
62-
63-
deprecated private class WildcardActivated extends DataFlow::FlowLabel, Wildcard {
64-
WildcardActivated() { this = this }
65-
}
66-
67-
deprecated private class TrueAndNullActivated extends DataFlow::FlowLabel, TrueAndNull {
68-
TrueAndNullActivated() { this = this }
69-
}

0 commit comments

Comments
 (0)