hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Minor improvements.

Browse Source
This commit is contained in:
Max Schaefer
2018-12-14 11:56:59 +00:00
parent 3397533045
commit 5ccad6ffc2
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/src/semmle/javascript/frameworks/Express.qll
View File

@@ -851,12 +851,11 @@ module Express {
}
/** A call to `response.sendFile`, considered as a file system access. */
private class ResponseSendFileAsFileSystemAccess extends FileSystemReadAccess, DataFlow::ValueNode {
override MethodCallExpr astNode;
private class ResponseSendFileAsFileSystemAccess extends FileSystemReadAccess, DataFlow::MethodCallNode {
ResponseSendFileAsFileSystemAccess() {
exists (string name | name = "sendFile" or name = "sendfile" |
asExpr().(MethodCallExpr).calls(any(ResponseExpr res), name))
calls(any(ResponseExpr res).flow(), name)
)
}
override DataFlow::Node getADataNode() {
@@ -864,7 +863,7 @@ module Express {
}
override DataFlow::Node getAPathArgument() {
result = DataFlow::valueNode(astNode.getArgument(0))
result = getArgument(0)
}
}