mirror of
https://github.com/github/codeql.git
synced 2026-04-27 09:45:15 +02:00
JS: remove restriction on truncate calls
This commit is contained in:
@@ -35,16 +35,14 @@ module ClosureLibrary {
|
||||
name = "trim" or
|
||||
name = "trimLeft" or
|
||||
name = "trimRight" or
|
||||
name = "truncate" or
|
||||
name = "truncateMiddle" or
|
||||
name = "unescapeEntities" or
|
||||
name = "urlDecode" or
|
||||
name = "urlEncode" or
|
||||
name = "whitespaceEscape"
|
||||
)
|
||||
or
|
||||
(name = "truncate" or name = "truncateMiddle") and
|
||||
pred = getArgument(0) and
|
||||
not getArgument(1).getIntValue() < 8 // length of <script>
|
||||
or
|
||||
name = "unescapeEntitiesWithDocument" and
|
||||
pred = getArgument(0)
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user