hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

add support for replace in Next.js router

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-02-17 13:30:53 +01:00
parent 97032f8627
commit 5b5baced9a
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/semmle/javascript/security/dataflow/ClientSideUrlRedirectCustomizations.qll
View File

@@ -182,6 +182,8 @@ module ClientSideUrlRedirect {
* A call to change the current url with a Next.js router.
*/
class NextRoutePushUrlSink extends ScriptUrlSink {
NextRoutePushUrlSink() { this = NextJS::nextRouter().getAMemberCall("push").getArgument(0) }
NextRoutePushUrlSink() {
this = NextJS::nextRouter().getAMemberCall(["push", "replace"]).getArgument(0)
}
}
}