JS: add _parsedUrl as remote input source

2026-04-28 10:15:14 +02:00 · 2025-06-16 16:28:30 +02:00
parent 67aac7abfa
commit da21a064ac
3 changed files with 13 additions and 3 deletions
--- a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
@@ -620,7 +620,7 @@ module Express {
        or
        // `req.path`
        kind = "url" and
-        this = ref.getAPropertyRead("path")
+        this = ref.getAPropertyRead(["path", "_parsedUrl"])
      )
    }