hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

use a barrier directly instead of a barrier guard

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-02-18 10:57:28 +01:00
parent d913654604
commit e359e1a373
6 changed files with 24 additions and 381 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/src/Security/CWE-400/PrototypePollutionUtility.ql
View File

@@ -185,6 +185,12 @@ class PropNameTracking extends DataFlow::Configuration {
)
}
override predicate isBarrier(DataFlow::Node node) {
super.isBarrier(node)
or
node instanceof DataFlow::VarAccessBarrier
}
override predicate isBarrierGuard(DataFlow::BarrierGuardNode node) {
node instanceof BlacklistEqualityGuard or
node instanceof WhitelistEqualityGuard or
@@ -193,8 +199,7 @@ class PropNameTracking extends DataFlow::Configuration {
node instanceof InstanceOfGuard or
node instanceof TypeofGuard or
node instanceof BlacklistInclusionGuard or
node instanceof WhitelistInclusionGuard or
node instanceof DataFlow::VarAccessBarrierGuard
node instanceof WhitelistInclusionGuard
}
}