hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 10:46:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Fix source of second part of path

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2020-10-22 12:20:50 +02:00
parent 8549c9cfde
commit 8ce5f41366
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/src/experimental/Security-new-dataflow/CWE-022/PathInjection.ql
View File

@@ -66,7 +66,9 @@ class FirstNormalization extends DataFlow2::PathNode {
class UncheckedNormalizedConfiguration extends TaintTracking::Configuration {
UncheckedNormalizedConfiguration() { this = "UncheckedNormalizedConfiguration" }
override predicate isSource(DataFlow::Node source) { source instanceof PathNormalization }
override predicate isSource(DataFlow::Node source) {
source = any(FirstNormalization n).getNode()
}
override predicate isSink(DataFlow::Node sink) {
sink = any(FileSystemAccess e).getAPathArgument()