mirror of
https://github.com/github/codeql.git
synced 2025-12-18 09:43:15 +01:00
Update javascript/ql/src/semmle/javascript/security/IncompleteBlacklistSanitizer.qll
Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
committed by
GitHub
parent
3640bbd466
commit
1db5cb15f0
@@ -53,7 +53,7 @@ class StringReplaceCallSequence extends DataFlow::CallNode {
|
||||
string getAReplacementString() {
|
||||
getAMember().replaces(_, result)
|
||||
or
|
||||
// StringReplaceCall::replaces/2 can't always find the `old` string, so this is added as a falback.
|
||||
// StringReplaceCall::replaces/2 can't always find the `old` string, so this is added as a fallback.
|
||||
getAMember().getRawReplacement().getStringValue() = result
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user