diff --git a/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll b/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll index 239e13f5aab..26011c8d918 100644 --- a/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll +++ b/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll @@ -83,7 +83,7 @@ private module UnicodeBypassValidationConfig implements DataFlow::StateConfigSig ( exists(Escaping escaping | source = escaping.getOutput()) or - exists(RegexExecution re | source = re) + source instanceof RegexExecution or // String Manipulation Method Calls // https://ruby-doc.org/core-2.7.0/String.html @@ -100,7 +100,7 @@ private module UnicodeBypassValidationConfig implements DataFlow::StateConfigSig "partition", "prepend", "replace", "rpartition", "scan", "split", "undump", "unpack" + ["", "1"] ] and - source = cn + source = cn ) or exists(DataFlow::CallNode cn |