hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Use API::CallNode

Browse Source
This commit is contained in:
Taus
2022-05-17 12:00:17 +00:00
committed by GitHub
parent a0f8e2f0b1
commit ba8d73c2be
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/src/Security/CWE-079/Jinja2WithoutEscaping.ql
View File

@@ -37,7 +37,7 @@ DataFlow::Node getAutoEscapeParameter(DataFlow::CallCfgNode call) {
result = call.getArgByName("autoescape")
}
from DataFlow::CallCfgNode call
from API::CallNode call
where
call = jinja2EnvironmentOrTemplate().getACall() and
not exists(call.asCfgNode().(CallNode).getNode().getStarargs()) and