mirror of
https://github.com/github/codeql.git
synced 2026-05-01 03:35:13 +02:00
Update javascript/ql/src/experimental/Security/CWE-94/ServerSideTemplateInjection.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
@@ -29,7 +29,6 @@ class SSTIPugSink extends ServerSideTemplateInjectionSink {
|
||||
renderImport = moduleImport(["pug", "jade"]) and
|
||||
(
|
||||
compile = renderImport.getAMemberCall("compile") and
|
||||
exists(compile.getACall())
|
||||
or
|
||||
compile = renderImport.getAMemberCall("render")
|
||||
) and
|
||||
|
||||
Reference in New Issue
Block a user