Added support for matchAll in CWE-020 including new test cases

2026-04-25 16:55:19 +02:00 · 2024-11-05 08:51:24 +01:00
parent 7b870d30a4
commit ccee34d6d3
5 changed files with 37 additions and 3 deletions
--- a/javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql
+++ b/javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.ql
@@ -36,6 +36,8 @@ private module Impl implements
        name = "replace"
        or
        name = "match" and exists(mcn.getAPropertyRead())
+        or
+        name = "matchAll" and exists(mcn.getAPropertyRead())
      )
    )
  }