mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
JS: Disable diff-informedness for full SSRF
Partial SSRF uses its result in a way that prevents diff-informedness
This commit is contained in:
@@ -30,12 +30,10 @@ private module FullServerSideRequestForgeryConfig implements DataFlow::ConfigSig
|
||||
node instanceof FullUrlControlSanitizer
|
||||
}
|
||||
|
||||
predicate observeDiffInformedIncrementalMode() { any() }
|
||||
|
||||
Location getASelectedSinkLocation(DataFlow::Node sink) {
|
||||
result = sink.(Sink).getLocation()
|
||||
or
|
||||
result = sink.(Sink).getRequest().getLocation()
|
||||
predicate observeDiffInformedIncrementalMode() {
|
||||
// The partial request forgery query depends on `fullyControlledRequest` to reject alerts about
|
||||
// such full-controlled requests, regardless of the associated source.
|
||||
none()
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user