mirror of
https://github.com/github/codeql.git
synced 2026-05-01 19:55:15 +02:00
add taint step through the wrap-ansi library
This commit is contained in:
@@ -228,3 +228,15 @@ class ColorsStep extends TaintTracking::SharedTaintStep {
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* A step through the [`wrap-ansi`](https://npmjs.org/package/wrap-ansi) library.
|
||||
*/
|
||||
class WrapAnsiStep extends TaintTracking::SharedTaintStep {
|
||||
override predicate stringManipulationStep(DataFlow::Node pred, DataFlow::Node succ) {
|
||||
exists(API::CallNode call | call = API::moduleImport("wrap-ansi").getACall() |
|
||||
pred = call.getArgument(0) and
|
||||
succ = call
|
||||
)
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user