Ruby: handle knownOrUnkown in default taint step

2026-05-02 04:05:14 +02:00 · 2022-11-08 16:02:19 +01:00
parent 2bef82babc
commit a60f510c85
1 changed files with 2 additions and 0 deletions
--- a/ruby/ql/lib/codeql/ruby/dataflow/internal/TaintTrackingPrivate.qll
+++ b/ruby/ql/lib/codeql/ruby/dataflow/internal/TaintTrackingPrivate.qll
@@ -105,6 +105,8 @@ private module Cached {
    exists(DataFlow::ContentSet c | readStep(nodeFrom, c, nodeTo) |
      c.isSingleton(any(DataFlow::Content::ElementContent ec))
      or
+      c.isKnownOrUnknownElement(any(DataFlow::Content::ElementContent ec))
+      or
      c.isAnyElement()
    )
  }