hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

implement a isNaN guard for unsafe-shell-command-construction

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-02-08 11:26:20 +01:00
parent 3206384884
commit d6721ec574
4 changed files with 66 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/lib/semmle/javascript/security/dataflow/UnsafeShellCommandConstructionQuery.qll
View File

@@ -24,7 +24,9 @@ class Configuration extends TaintTracking::Configuration {
override predicate isSanitizerGuard(TaintTracking::SanitizerGuardNode guard) {
guard instanceof PathExistsSanitizerGuard or
guard instanceof TaintTracking::AdHocWhitelistCheckSanitizer
guard instanceof TaintTracking::AdHocWhitelistCheckSanitizer or
guard instanceof NaNGuard or
guard instanceof TypeOfSanitizer
}
// override to require that there is a path without unmatched return steps