Add taint step for Base64.decode64

2026-04-30 03:05:15 +02:00 · 2021-09-08 17:48:54 +01:00
parent adceb0a2a1
commit 9b9fc18605
2 changed files with 25 additions and 0 deletions
--- a/ql/lib/codeql/ruby/security/UnsafeDeserializationQuery.qll
+++ b/ql/lib/codeql/ruby/security/UnsafeDeserializationQuery.qll
@@ -27,4 +27,8 @@ class Configuration extends TaintTracking::Configuration {
    super.isSanitizer(node) or
    node instanceof UnsafeDeserialization::Sanitizer
  }
+
+  override predicate isAdditionalTaintStep(DataFlow::Node fromNode, DataFlow::Node toNode) {
+    UnsafeDeserialization::isAdditionalTaintStep(fromNode, toNode)
+  }
 }