hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-05 02:30:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

simplify UnicodeBypassValidationQuery code

Browse Source
This commit is contained in:
Sim4n6
2024-06-05 22:45:49 +01:00
parent 7dcbbbac91
commit dabc33bf66
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll
View File

@@ -83,7 +83,7 @@ private module UnicodeBypassValidationConfig implements DataFlow::StateConfigSig
(
exists(Escaping escaping | source = escaping.getOutput())
or
exists(RegexExecution re | source = re)
source instanceof RegexExecution
or
// String Manipulation Method Calls
// https://ruby-doc.org/core-2.7.0/String.html
@@ -100,7 +100,7 @@ private module UnicodeBypassValidationConfig implements DataFlow::StateConfigSig
"partition", "prepend", "replace", "rpartition", "scan", "split", "undump",
"unpack" + ["", "1"]
] and
source = cn
source = cn
)
or
exists(DataFlow::CallNode cn |