mirror of
https://github.com/github/codeql.git
synced 2026-05-01 11:45:14 +02:00
add separate query for sinks that accepts data: URL
This commit is contained in:
@@ -761,13 +761,6 @@ module NodeJSLib {
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* The dynamic import expression input can be a `data:` URL which loads any module from that data
|
||||
*/
|
||||
class DynamicImport extends CodeInjection::Sink, DataFlow::ExprNode {
|
||||
DynamicImport() { this = any(DynamicImportExpr e).getSource().flow() }
|
||||
}
|
||||
|
||||
/**
|
||||
* A call to a method from module `child_process`.
|
||||
*/
|
||||
|
||||
Reference in New Issue
Block a user