Merge branch 'restify_improvements' of https://github.com/pwntester/codeql into restify_improvements

This commit is contained in:
Alvaro Muñoz
2022-12-14 13:11:13 +01:00

View File

@@ -165,13 +165,12 @@ module Spife {
kind = "cookie"
or
// req.validatedBody.get('foo')
exists(DataFlow::PropRead validated, DataFlow::MethodCallNode get |
rh.getARequestSource().ref().getAPropertyRead() = validated and
validated.getPropertyName().matches("validated%") and
get.getReceiver() = validated and
this = get and
kind = "body"
)
this =
rh.getARequestSource()
.ref()
.getAPropertyRead(any(string s | s.matches("validated%")))
.getAMethodCall("get") and
kind = "body"
}
override RouteHandler getRouteHandler() { result = rh }