JS: revert path sanitizers in proto pollution query

asgerf · asgerf · commit 2f4a181a7d22 · 2023-04-17T12:21:00.000+02:00
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
@@ -53,8 +53,6 @@ class Configuration extends TaintTracking::Configuration {
         not replace.getRawReplacement().getStringValue() = ""
       )
     )
-    or
-    node = NodeJSLib::Path::moduleMember(["join", "relative", "resolve"]).getACall()
   }
 
   override predicate isSanitizerEdge(

Original file line number	Diff line number	Diff line change
`@@ -53,8 +53,6 @@ class Configuration extends TaintTracking::Configuration {`
`53`	`53`	`not replace.getRawReplacement().getStringValue() = ""`
`54`	`54`	`)`
`55`	`55`	`)`
`56`		`- or`
`57`		`- node = NodeJSLib::Path::moduleMember(["join", "relative", "resolve"]).getACall()`
`58`	`56`	`}`
`59`	`57`
`60`	`58`	`override predicate isSanitizerEdge(`