Update javascript/ql/lib/semmle/javascript/frameworks/Spife.qll

Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Alvaro Muñoz
2022-12-14 10:18:47 +01:00
committed by GitHub
parent 270a4355df
commit 701676eea1

View File

@@ -165,13 +165,12 @@ module Spife {
kind = "cookie"
or
// req.validatedBody.get('foo')
exists(DataFlow::PropRead validated, DataFlow::MethodCallNode get |
rh.getARequestSource().ref().getAPropertyRead() = validated and
validated.getPropertyName().matches("validated%") and
get.getReceiver() = validated and
this = get and
kind = "body"
)
this =
rh.getARequestSource()
.ref()
.getAPropertyRead(any(string s | s.matches("validated%")))
.getAMethodCall("get") and
kind = "body"
}
override RouteHandler getRouteHandler() { result = rh }