hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Provide more precise related locations

Browse Source
This commit is contained in:
Asger F
2025-02-11 14:12:03 +01:00
parent 7476d9ed6b
commit 7e3f89842d
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/security/regexp/PolynomialReDoSQuery.qll
View File

@@ -29,8 +29,6 @@ module PolynomialReDoSConfig implements DataFlow::ConfigSig {
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSinkLocation(DataFlow::Node sink) {
result = sink.(Sink).getLocation()
or
result = sink.(Sink).getHighlight().getLocation()
or
result = sink.(Sink).getRegExp().getLocation()

4
javascript/ql/src/experimental/Security/CWE-918/SSRF.qll
View File

@@ -29,6 +29,10 @@ module SsrfConfig implements DataFlow::ConfigSig {
predicate isBarrierOut(DataFlow::Node node) { strictSanitizingPrefixEdge(node, _) }
Location getASelectedSourceLocation(DataFlow::Node source) {
none() // Does not select the source
}
predicate observeDiffInformedIncrementalMode() { any() }
}