Changed to for constant string

2026-04-25 16:55:19 +02:00 · 2023-06-19 11:46:08 +01:00
parent 7c235e3786
commit 1a108fb1c9
1 changed files with 1 additions and 1 deletions
--- a/java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExec.qll
+++ b/java/ql/src/experimental/Security/CWE/CWE-078/CommandInjectionRuntimeExec.qll
@@ -98,6 +98,6 @@ class UnSafeExecutable extends string {
  bindingset[this]
  UnSafeExecutable() {
    this.regexpMatch("^(|.*/)([a-z]*sh|javac?|python.*|perl|[Pp]ower[Ss]hell|php|node|deno|bun|ruby|osascript|cmd|Rscript|groovy)(\\.exe)?$") and
-    not this.matches("netsh.exe")
+    not this = "netsh.exe"
  }
 }