hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #18740 from asgerf/js/more-precise-diff-informed

Browse Source 
JS: Provide more precise related locations
This commit is contained in:
Asger F
2025-02-17 10:27:15 +01:00
committed by GitHub
parent 3644de007f 7e3f89842d
commit 0ca9b2285b
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSQuery.qll
View File

@@ -29,8 +29,6 @@ module PolynomialReDoSConfig implements DataFlow::ConfigSig {
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSinkLocation(DataFlow::Node sink) {
result = sink.(Sink).getLocation()
or
result = sink.(Sink).getHighlight().getLocation()
or
result = sink.(Sink).getRegExp().getLocation()

4
javascript/ql/src/experimental/Security/CWE-918/SSRF.qll
View File

@@ -29,6 +29,10 @@ module SsrfConfig implements DataFlow::ConfigSig {
predicate isBarrierOut(DataFlow::Node node) { strictSanitizingPrefixEdge(node, _) }
Location getASelectedSourceLocation(DataFlow::Node source) {
none() // Does not select the source
}
predicate observeDiffInformedIncrementalMode() { any() }
}