hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-18 16:03:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix yargs bug

Browse Source
This commit is contained in:
amammad
2023-06-25 23:30:24 +10:00
parent c16a2827d7
commit effb8024a4
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/experimental/Security/CWE-522-DecompressionBombs/CommandLineSource.qll
View File

@@ -11,8 +11,8 @@ abstract class CommandLineFlowSource extends API::Node { }
class Yargs extends CommandLineFlowSource {
Yargs() {
this = API::moduleImport("yargs/yargs").getASuccessor().getMember("argv") or
this = API::moduleImport("yargs/yargs").getASuccessor().getMember("argv").getAMember()
this = API::moduleImport("yargs/yargs").getASuccessor*().getMember("argv") or
this = API::moduleImport("yargs/yargs").getASuccessor*().getMember("argv").getAMember()
}
}