hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

slightly limit viable template files from render calls

Browse Source
This commit is contained in:
Alex Ford
2021-10-11 17:12:08 +01:00
parent cdfee1f27d
commit 7270fe0ee7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ql/lib/codeql/ruby/frameworks/ActionView.qll
View File

@@ -97,7 +97,7 @@ abstract class RenderCall extends MethodCall {
*/
ErbFile getTemplateFile() {
result.getTemplateName() = this.getBaseName() and
result.getRelativePath().matches("%/" + this.getSubPath() + "%")
result.getRelativePath().matches("%app/views/" + this.getSubPath() + "%")
}
/**