hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 09:43:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Moved into experimental

Browse Source
This commit is contained in:
Nate Johnson
2023-04-18 21:59:14 -04:00
parent bbb1ee9597
commit 78229bb264
3 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
javascript/ql/src/Security/CWE-444/InsecureHttpParser.qhelp → javascript/ql/src/experimental/Security/CWE-444/InsecureHttpParser.qhelp
View File

2
javascript/ql/src/Security/CWE-444/InsecureHttpParser.ql → javascript/ql/src/experimental/Security/CWE-444/InsecureHttpParser.ql
View File

@@ -27,7 +27,7 @@ where
exists(DataFlow::SourceNode env |
env = NodeJSLib::process().getAPropertyRead("env") and
disable = env.getAPropertyWrite("NODE_OPTIONS") and
disable.getRhs().getStringValue().regexpMatch(".*--insecure-http-parser.*")
disable.getRhs().getStringValue().matches("%--insecure-http-parser%")
)
or
(

0
javascript/ql/src/Security/CWE-444/examples/InsecureHttpParser.js → javascript/ql/src/experimental/Security/CWE-444/examples/InsecureHttpParser.js
View File