We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 8f53801 commit 5adcdf1Copy full SHA for 5adcdf1
ruby/ql/lib/codeql/ruby/security/UrlRedirectCustomizations.qll
@@ -68,11 +68,7 @@ module UrlRedirect {
68
// Otherwise, we have to rely on a heuristic to filter out invulnerable handlers.
69
// We exclude any handlers with names containing create/update/destroy, as these are not likely to handle GET requests.
70
not exists(method.(ActionControllerActionMethod).getARoute()) and
71
- not this.asExpr()
72
- .getExpr()
73
- .getEnclosingMethod()
74
- .getName()
75
- .regexpMatch(".*(create|update|destroy).*")
+ not method.getName().regexpMatch(".*(create|update|destroy).*")
76
)
77
78
}
0 commit comments