hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

make a type more specific

Browse Source
This commit is contained in:
Alex Ford
2021-09-08 12:45:19 +01:00
parent ed708c1903
commit 0689e6095e
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ql/lib/codeql/ruby/security/ReflectedXSSCustomizations.qll
View File

@@ -137,11 +137,10 @@ module ReflectedXSS {
// instance variables in the controller
exists(
ActionControllerActionMethod action, VariableReadAccess viewVarRead, AssignExpr ae,
VariableWriteAccess controllerVarWrite
InstanceVariableWriteAccess controllerVarWrite
|
viewVarRead = node2.asExpr().(CfgNodes::ExprNodes::VariableReadAccessCfgNode).getExpr() and
action.getDefaultTemplateFile() = viewVarRead.getLocation().getFile() and
controllerVarWrite.getVariable() instanceof InstanceVariable and
// match read to write on variable name
viewVarRead.getVariable().getName() = controllerVarWrite.getVariable().getName() and
// TODO: include only final assignment along a path