Skip to content

Commit 7ff0e44

Browse files
committed
Add hardwareConcurrency codeQL
1 parent be37440 commit 7ff0e44

File tree

3 files changed

+26
-0
lines changed

3 files changed

+26
-0
lines changed

.github/codeql/codeql-config.yml

+3
Original file line numberDiff line numberDiff line change
@@ -2,3 +2,6 @@ paths:
22
- src
33
- modules
44
- libraries
5+
queries:
6+
- name: Prebid queries
7+
uses: ./.github/codeql/queries
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
/**
2+
* @id prebid/hardware-concurrency
3+
* @name hardwareConcurrency
4+
* @kind problem
5+
* @problem.severity warning
6+
* @description Finds uses of hardwareConcurrency
7+
*/
8+
9+
import javascript
10+
11+
from DataFlow::SourceNode nav
12+
where
13+
nav = DataFlow::globalVarRef("navigator") or
14+
nav = DataFlow::globalVarRef("top").getAPropertyRead("navigator")
15+
select nav.getAPropertyRead("hardwareConcurrency"), "hardwareConcurrency is an indicator of fingerprinting"

.github/codeql/queries/qlpack.yml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
library: false
3+
warnOnImplicitThis: false
4+
name: queries
5+
version: 0.0.1
6+
dependencies:
7+
codeql/javascript-all: ^1.1.1
8+
codeql/javascript-queries: ^1.1.0

0 commit comments

Comments
 (0)