hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-20 14:34:04 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Remove omittable exists variables

Browse Source
This commit is contained in:
Tony Torralba
2022-12-21 16:33:15 +01:00
parent 32471d326e
commit 3b6dae41cd
20 changed files with 36 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/src/Security/CWE-116/IncompleteSanitization.ql
View File

@@ -173,10 +173,8 @@ where
// don't flag replacements of certain characters with whitespace
not whitelistedRemoval(repl)
or
exists(DataFlow::RegExpLiteralNode rel |
isBackslashEscape(repl, rel) and
not allBackslashesEscaped(repl) and
msg = "This does not escape backslash characters in the input."
)
isBackslashEscape(repl, _) and
not allBackslashesEscaped(repl) and
msg = "This does not escape backslash characters in the input."
)
select repl.getCalleeNode(), msg