mirror of
https://github.com/github/codeql.git
synced 2026-04-25 08:45:14 +02:00
JS: Remove old 'split' handling from TaintedUrlSuffix
This commit is contained in:
@@ -80,11 +80,6 @@ module TaintedUrlSuffix {
|
||||
name = StringOps::substringMethodName() and
|
||||
not call.getArgument(0).getIntValue() = 0
|
||||
or
|
||||
// Split around '#' or '?' and extract the suffix
|
||||
name = "split" and
|
||||
call.getArgument(0).getStringValue() = ["#", "?"] and
|
||||
not exists(call.getAPropertyRead("0")) // Avoid false flow to the prefix
|
||||
or
|
||||
// Replace '#' and '?' with nothing
|
||||
name = "replace" and
|
||||
call.getArgument(0).getStringValue() = ["#", "?"] and
|
||||
|
||||
Reference in New Issue
Block a user