From dabc33bf6675bd26e157cb803c2653abc9ba67ce Mon Sep 17 00:00:00 2001 From: Sim4n6 Date: Wed, 5 Jun 2024 22:45:49 +0100 Subject: [PATCH] simplify UnicodeBypassValidationQuery code --- .../codeql/ruby/experimental/UnicodeBypassValidationQuery.qll | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll b/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll index 239e13f5aab..26011c8d918 100644 --- a/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll +++ b/ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll @@ -83,7 +83,7 @@ private module UnicodeBypassValidationConfig implements DataFlow::StateConfigSig ( exists(Escaping escaping | source = escaping.getOutput()) or - exists(RegexExecution re | source = re) + source instanceof RegexExecution or // String Manipulation Method Calls // https://ruby-doc.org/core-2.7.0/String.html @@ -100,7 +100,7 @@ private module UnicodeBypassValidationConfig implements DataFlow::StateConfigSig "partition", "prepend", "replace", "rpartition", "scan", "split", "undump", "unpack" + ["", "1"] ] and - source = cn + source = cn ) or exists(DataFlow::CallNode cn |