hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

inline ifStmt field

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2019-12-13 19:00:54 +01:00
parent 3b2cc4674e
commit 1efe2ba167
1 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
javascript/ql/src/semmle/javascript/security/dataflow/ExceptionXss.qll
View File

@@ -67,18 +67,15 @@ module ExceptionXss {
*/
class Callback extends DataFlow::FunctionNode {
DataFlow::ParameterNode errorParameter;
IfStmt ifStmt;
Callback() {
exists(DataFlow::CallNode call | call.getLastArgument().getAFunctionValue() = this) and
this.getNumParameter() = 2 and
errorParameter = this.getParameter(0) and
ifStmt = this.getFunction().getBodyStmt(0) and
errorParameter.flowsToExpr(ifStmt.getCondition()) and
not ifStmt.getThen().getBasicBlock().getASuccessor*() = this
.getFunction()
.getBodyStmt(1)
.getBasicBlock()
exists(IfStmt ifStmt |
ifStmt = this.getFunction().getBodyStmt(0) and
errorParameter.flowsToExpr(ifStmt.getCondition())
)
}
DataFlow::Node getErrorParam() { result = errorParameter }