JS: Fix issue with new RegExp().exec()

2026-04-30 11:15:13 +02:00 · 2024-12-04 13:59:27 +01:00
parent f6d0835c64
commit 71a6a47713
2 changed files with 4 additions and 4 deletions
--- a/javascript/ql/lib/semmle/javascript/security/TaintedUrlSuffix.qll
+++ b/javascript/ql/lib/semmle/javascript/security/TaintedUrlSuffix.qll
@@ -108,7 +108,7 @@ module TaintedUrlSuffix {
      or
      // Assume calls to regexp.exec always extract query/fragment parameters.
      exists(MethodCallNode call |
-        call = any(RegExpLiteral re).flow().(DataFlow::SourceNode).getAMethodCall("exec") and
+        call = any(DataFlow::RegExpCreationNode re).getAMethodCall("exec") and
        src = call.getArgument(0) and
        dst = call
      )