hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 11:46:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: simplify predicate by using DataFlow::CallNode

Browse Source
This commit is contained in:
Nick Rolfe
2022-04-19 11:27:33 +01:00
parent ca4dc0583d
commit ac805f0cdc
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ruby/ql/src/queries/security/cwe-116/IncompleteSanitization.ql
View File

@@ -124,9 +124,9 @@ predicate removesFirstOccurence(StringSubstitutionCall sub, string str) {
* Gets a method call where the receiver is the result of a string substitution
* call.
*/
DataFlow::Node getAMethodCall(StringSubstitutionCall call) {
DataFlow::CallNode getAMethodCall(StringSubstitutionCall call) {
exists(DataFlow::Node receiver |
receiver.asExpr() = result.asExpr().(ExprNodes::MethodCallCfgNode).getReceiver() and
receiver = result.getReceiver() and
(
// for a non-destructive string substitution, is there flow from it to the
// receiver of another method call?