mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
only block flow for dominated reads when the property name is known
This commit is contained in:
@@ -551,7 +551,10 @@ module TaintTracking {
|
||||
or
|
||||
// reading from a tainted object yields a tainted result
|
||||
succ.(DataFlow::PropRead).getBase() = pred and
|
||||
not AccessPath::DominatingPaths::hasDominatingWrite(succ) and
|
||||
not (
|
||||
AccessPath::DominatingPaths::hasDominatingWrite(succ) and
|
||||
exists(succ.(DataFlow::PropRead).getPropertyName())
|
||||
) and
|
||||
not isSafeClientSideUrlProperty(succ) and
|
||||
not ClassValidator::isAccessToSanitizedField(succ)
|
||||
or
|
||||
|
||||
Reference in New Issue
Block a user