hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

change Source to ConstantString, it seems that we have some duplicate results now, ConstantString is suggested as a better alternative for finding constant sources

Browse Source
This commit is contained in:
amammad
2023-08-30 20:47:43 +10:00
parent 3f64cc82eb
commit 7a577ddd98
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-321-HardCodedKey/jwtConstantKey.ql
View File

@@ -18,7 +18,7 @@ class JWTDecodeConfig extends TaintTracking::Configuration {
JWTDecodeConfig() { this = "JWTConfig" }
override predicate isSource(DataFlow::Node source) {
source.asExpr() instanceof StringLiteral or source.asExpr() instanceof TemplateLiteral
source.asExpr() instanceof ConstantString
}
override predicate isSink(DataFlow::Node sink) {