JS: fix use of dataOrTaint()

2026-04-30 19:26:02 +02:00 · 2019-04-10 14:55:44 +01:00
parent 37fa2446d4
commit 0823f6c935
1 changed files with 1 additions and 1 deletions
--- a/javascript/ql/src/semmle/javascript/security/dataflow/TaintedPath.qll
+++ b/javascript/ql/src/semmle/javascript/security/dataflow/TaintedPath.qll
@@ -162,7 +162,7 @@ module TaintedPath {
        guard.sanitizes(_, e, any(Label::PosixPath label)) and
        src.(DataFlow::SourceNode).flowsToExpr(e) and
        dst = src and
-        srclabel = DataFlow::FlowLabel::dataOrTaint() and
+        srclabel instanceof DataFlow::StandardFlowLabel and
        dstlabel instanceof Label::PosixPath
      )
      or