hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 11:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Simplify StartsWithCheck

Browse Source
This commit is contained in:
haby0
2022-03-30 19:04:03 +08:00
parent bf8c7a2ea7
commit 8f2013c32e
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
python/ql/src/experimental/semmle/python/security/injection/CsvInjection.qll
View File

@@ -21,11 +21,16 @@ class CsvInjectionFlowConfig extends TaintTracking::Configuration {
}
}
class StartsWithCheck extends DataFlow::BarrierGuard {
StartsWithCheck() { this.(CallNode).getNode().getFunc().(Attribute).getName() = "startswith" }
private class StartsWithCheck extends DataFlow::BarrierGuard {
Attribute attr;
StartsWithCheck() {
this.(CallNode).getNode().getFunc() = attr and
attr.getName() = "startswith"
}
override predicate checks(ControlFlowNode node, boolean branch) {
node = this.(CallNode).getNode().getFunc().(Attribute).getObject().getAFlowNode() and
node = attr.getObject().getAFlowNode() and
branch = true
}
}