hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-21 06:37:10 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove additional path-injection sinks

Browse Source
This commit is contained in:
Esben Sparre Andreasen
2020-10-12 13:43:41 +02:00
committed by Ian Wright
parent 999de74f49
commit 63a648dc41
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/frameworks/NodeJSLib.qll
View File

@@ -496,7 +496,7 @@ module NodeJSLib {
* A member `member` from module `fs`.
*/
DataFlow::SourceNode moduleMember(string member) {
exists(string moduleName | moduleName = ["fs-extra", "graceful-fs", "fs"] |
exists(string moduleName | moduleName = ["fs"] |
result = DataFlow::moduleMember(moduleName, member)
)
}