hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 11:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update python/ql/src/experimental/semmle/python/security/injection/CsvInjection.qll

Browse Source 
Co-authored-by: yoff <lerchedahl@gmail.com>
This commit is contained in:
haby0
2022-03-30 22:54:30 +08:00
committed by GitHub
parent 8f2013c32e
commit 1e6893e230
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/src/experimental/semmle/python/security/injection/CsvInjection.qll
View File

@@ -22,15 +22,15 @@ class CsvInjectionFlowConfig extends TaintTracking::Configuration {
}
private class StartsWithCheck extends DataFlow::BarrierGuard {
Attribute attr;
DataFlow::MethodCallNode mc;
StartsWithCheck() {
this.(CallNode).getNode().getFunc() = attr and
attr.getName() = "startswith"
this = mc.asCfgNode() and
mc.calls(_, "startswith")
}
override predicate checks(ControlFlowNode node, boolean branch) {
node = attr.getObject().getAFlowNode() and
node = mc.getObject().asCfgNode() and
branch = true
}
}