hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

remove hbs specific checks

Browse Source
This commit is contained in:
CaptainFreak
2021-02-09 07:35:35 +05:30
parent d016ba2252
commit 503b339a1f
1 changed files with 1 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
javascript/ql/src/experimental/Security/CWE-073/TemplateObjectInjection.ql
View File

@@ -14,10 +14,6 @@ import javascript
import DataFlow::PathGraph
import semmle.javascript.security.TaintedObject
predicate isUsingHbsEngine() {
Express::appCreation().getAMethodCall("set").getArgument(1).mayHaveStringValue("hbs")
}
class TemplateObjInjectionConfig extends TaintTracking::Configuration {
TemplateObjInjectionConfig() { this = "TemplateObjInjectionConfig" }
@@ -32,8 +28,7 @@ class TemplateObjInjectionConfig extends TaintTracking::Configuration {
exists(MethodCallExpr mc |
Express::isResponse(mc.getReceiver()) and
mc.getMethodName() = "render" and
sink.asExpr() = mc.getArgument(1) and
isUsingHbsEngine()
sink.asExpr() = mc.getArgument(1)
)
}