mirror of
https://github.com/github/codeql.git
synced 2026-04-27 01:35:13 +02:00
Fix ExecUnescaped
This commit is contained in:
@@ -48,5 +48,5 @@ predicate builtFromUncontrolledConcat(Expr expr) {
|
||||
from StringArgumentToExec argument
|
||||
where
|
||||
builtFromUncontrolledConcat(argument) and
|
||||
not execTainted(_, _, argument)
|
||||
not execIsTainted(_, _, argument)
|
||||
select argument, "Command line is built with string concatenation."
|
||||
|
||||
Reference in New Issue
Block a user