hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 12:45:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

use NodeJSLib::Path instead of DataFlow::moduleMember

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-05-20 10:30:23 +02:00
parent 7c51dff0f7
commit 33e0f25f3c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/semmle/javascript/frameworks/NodeJSLib.qll
View File

@@ -272,7 +272,7 @@ module NodeJSLib {
DataFlow::Node tainted;
PathFlowTarget() {
exists(string methodName | this = DataFlow::moduleMember("path", methodName).getACall() |
exists(string methodName | this = NodeJSLib::Path::moduleMember(methodName).getACall() |
// getters
methodName = "basename" and tainted = getArgument(0)
or