From 9e63a3d30b3da79da9e3e4e5ab621a77061d7aee Mon Sep 17 00:00:00 2001 From: Raul Garcia Date: Mon, 12 Sep 2022 18:22:13 -0700 Subject: [PATCH] Fixing a couple of bug from PR comments --- .../JsonWebTokenHandler/JsonWebTokenHandlerLib.qll | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll index 5f0b823d09c..d5d0db6af1d 100644 --- a/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll +++ b/csharp/ql/src/experimental/Security Features/JsonWebTokenHandler/JsonWebTokenHandlerLib.qll @@ -23,7 +23,7 @@ class TokenValidationParametersPropertySensitiveValidation extends Property { */ class FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation extends DataFlow::Configuration { FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation() { - this = "FlowsToTokenValidationResultIsValidCall" + this = "FalseValueFlowsToTokenValidationParametersPropertyWriteToBypassValidation" } override predicate isSource(DataFlow::Node source) { @@ -75,7 +75,7 @@ class JsonWebTokenHandlerValidateTokenCall extends MethodCall { */ private class TokenValidationResultIsValidCall extends PropertyRead { TokenValidationResultIsValidCall() { - exists(Property p | p.getAnAccess().(PropertyRead) = this | + exists(Property p | p.getAnAccess() = this | p.hasName("IsValid") or p.hasName("Exception") )