JS: Fix regexp tracking

This commit is contained in:
Asger Feldthaus
2020-03-27 20:59:14 +00:00
parent 92d555166a
commit ec19bed1fa

View File

@@ -904,7 +904,7 @@ private DataFlow::Node regExpSource(DataFlow::Node re, DataFlow::TypeBackTracker
exists(DataFlow::TypeBackTracker t2, DataFlow::Node succ | succ = regExpSource(re, t2) |
t2 = t.smallstep(result, succ)
or
any(TaintTracking::AdditionalTaintStep dts).step(result, succ) and
TaintTracking::sharedTaintStep(result, succ) and
t = t2
)
}