Update javascript/ql/src/semmle/javascript/frameworks/Markdown.qll

Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
Erik Krogh Kristensen
2021-04-20 19:57:47 +02:00
committed by GitHub
parent 62dfd1fa7d
commit 357e1c0802

View File

@@ -139,7 +139,7 @@ private module MarkdownIt {
exists(API::CallNode call |
call = markdownIt().getMember(["use", "set", "configure", "enable", "disable"]).getACall() and
result = call.getReturn() and
not call.getParameter(0).getARhs().getALocalSource() =
not call.getParameter(0).getAValueReachingRhs() =
DataFlow::moduleImport("markdown-it-sanitizer")
)
}