mirror of
https://github.com/github/codeql.git
synced 2025-12-24 12:46:34 +01:00
Fix ExecUnescaped
This commit is contained in:
@@ -48,5 +48,5 @@ predicate builtFromUncontrolledConcat(Expr expr) {
|
||||
from StringArgumentToExec argument
|
||||
where
|
||||
builtFromUncontrolledConcat(argument) and
|
||||
not execTainted(_, _, argument)
|
||||
not execIsTainted(_, _, argument)
|
||||
select argument, "Command line is built with string concatenation."
|
||||
|
||||
Reference in New Issue
Block a user