mirror of
https://github.com/hohn/codeql-javascript-multiflow.git
synced 2025-12-16 20:03:04 +01:00
Add nested if() test. Update source locations.
This commit is contained in:
committed by
=Michael Hohn
parent
d02e26d6d2
commit
405b3a0661
@@ -72,33 +72,6 @@ predicate sanitizerCheckedSuccessor(ControlFlowNode gr, ControlFlowNode postgr)
|
||||
// recursion we need to be able to traverse expressions.
|
||||
}
|
||||
|
||||
predicate foo(VarAccess gr, VarAccess postgr) {
|
||||
exists(DotExpr temp, MethodCallExpr mce |
|
||||
temp.getPropertyName() = "setValue" and
|
||||
mce.getReceiver() = temp.getBase() and
|
||||
gr = mce.getReceiver() and
|
||||
gr.getASuccessor+() = postgr
|
||||
)
|
||||
}
|
||||
|
||||
predicate foo1(Expr gr, Expr postgr) {
|
||||
exists(DotExpr temp, MethodCallExpr mce |
|
||||
temp.getPropertyName() = "setValue" and
|
||||
mce.getReceiver() = temp.getBase() and
|
||||
gr = mce.getReceiver() and
|
||||
recursiveSuccessor(gr, postgr)
|
||||
)
|
||||
}
|
||||
|
||||
predicate foo2(Expr gr, Expr postgr) {
|
||||
exists(DotExpr temp, MethodCallExpr mce |
|
||||
temp.getPropertyName() = "setValue" and
|
||||
mce.getReceiver() = temp.getBase() and
|
||||
gr = mce.getReceiver() and
|
||||
sanitizerCheckedSuccessor(gr, postgr)
|
||||
)
|
||||
}
|
||||
|
||||
predicate inSafeToWrite(ControlFlowNode p) {
|
||||
exists(
|
||||
// DotExpr temp, MethodCallExpr mce,
|
||||
|
||||
Reference in New Issue
Block a user