mirror of
https://github.com/github/codeql.git
synced 2025-12-24 04:36:35 +01:00
Almost fix getFlaskMailArgument(...)
This commit is contained in:
@@ -21,6 +21,9 @@ private module FlaskMail {
|
||||
private DataFlow::CallCfgNode flaskMessageCall() { result = flaskMessageInstance().getACall() }
|
||||
|
||||
private DataFlow::Node getFlaskMailArgument(int argumentPosition, string argumentName) {
|
||||
// 'argumentPosition' is not bound to a value.
|
||||
argumentName in ["body", "html", "recipients", "sender", "subject"] and
|
||||
argumentPosition in [0 .. 5] and
|
||||
result in [
|
||||
flaskMessageCall().getArg(argumentPosition), flaskMessageCall().getArgByName(argumentName)
|
||||
]
|
||||
|
||||
Reference in New Issue
Block a user