From 03e1bcc8bc10ce92842b9c1d18f856ea32d693b4 Mon Sep 17 00:00:00 2001 From: Esben Sparre Andreasen Date: Thu, 10 Feb 2022 14:41:40 +0100 Subject: [PATCH] nonify --- .../ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql b/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql index 5aacf8f6cf9..d50fb54e1b6 100644 --- a/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql +++ b/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql @@ -51,6 +51,6 @@ class ClientSuppliedIpUsedInSecurityCheckConfig extends TaintTracking::Configura from ClientSuppliedIpUsedInSecurityCheckConfig config, DataFlow::PathNode source, DataFlow::PathNode sink -where config.hasFlowPath(source, sink) +where none() select sink.getNode(), source, sink, "IP address spoofing might include code from $@.", source.getNode(), "this user input"