hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #585 from xiemaisi/js/join-order-fiddling

Browse Source 
Approved by esben-semmle
This commit is contained in:
semmle-qlci
2018-11-30 14:59:53 +00:00
committed by GitHub
parent 08f5c2b6a6 dcad2a3431
commit dbeb2dfa0e
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
javascript/ql/src/semmle/javascript/frameworks/Express.qll
View File

@@ -127,10 +127,12 @@ module Express {
Expr getRouteHandlerExpr(int index) {
// The first argument is a URI pattern if it is a string. If it could possibly be
// a function, we consider it to be a route handler, otherwise a URI pattern.
if getArgument(0).analyze().getAType() = TTFunction() then
result = getArgument(index)
else
(index >= 0 and result = getArgument(index + 1))
exists (AnalyzedNode firstArg | firstArg = getArgument(0).analyze() |
if firstArg.getAType() = TTFunction() then
result = getArgument(index)
else
(index >= 0 and result = getArgument(index + 1))
)
}
/** Gets an argument that represents a route handler being registered. */