mirror of
https://github.com/github/codeql.git
synced 2026-05-04 05:05:12 +02:00
Update javascript/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
@@ -19,7 +19,7 @@ class PredictableResultSource extends DataFlow::Node {
|
||||
PredictableResultSource() {
|
||||
exists(API::Node uuidCallRet |
|
||||
uuidCallRet =
|
||||
API::moduleImport("uuid").getMember(["v1", "v2", "v3", "v5"]).getACall().getReturn()
|
||||
API::moduleImport("uuid").getMember(["v1", "v3", "v5"]).getACall().getReturn()
|
||||
|
|
||||
this = uuidCallRet.asSource()
|
||||
)
|
||||
|
||||
Reference in New Issue
Block a user