mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
WIP: Ruby: Add context query for retrieving XSS sanitisers
This commit is contained in:
12
ruby/ql/src/Sanitizers.ql
Normal file
12
ruby/ql/src/Sanitizers.ql
Normal file
@@ -0,0 +1,12 @@
|
||||
/**
|
||||
* @name Sanitizers
|
||||
* @id rb/meta/sanitizers
|
||||
* @kind problem
|
||||
* @severity info
|
||||
*/
|
||||
import codeql.ruby.DataFlow
|
||||
import codeql.ruby.security.XSS
|
||||
|
||||
from StoredXss::Sanitizer s
|
||||
where s instanceof DataFlow::CallNode
|
||||
select s, "XSS sanitizer"
|
||||
Reference in New Issue
Block a user