hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Remove obsolete code

Browse Source
This commit is contained in:
Asger F
2019-05-28 11:54:57 +01:00
parent 8d60ae7200
commit 9f43844f1e
1 changed files with 0 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/src/semmle/javascript/security/dataflow/TaintedPath.qll
View File

@@ -134,15 +134,6 @@ module TaintedPath {
) {
isTaintedPathStep(src, dst, srclabel, dstlabel)
or
// Introduce the specialized flow labels when approaching a specialized sanitizer guard.
exists(TaintTracking::LabeledSanitizerGuardNode guard, Expr e |
guard.sanitizes(_, e, any(Label::PosixPath label)) and
src.(DataFlow::SourceNode).flowsToExpr(e) and
dst = src and
srclabel instanceof DataFlow::StandardFlowLabel and
dstlabel instanceof Label::PosixPath
)
or
// Ignore all preliminary sanitization after decoding URI components
srclabel instanceof Label::PosixPath and
dstlabel instanceof Label::PosixPath and