We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 0817238 commit 53f24a5Copy full SHA for 53f24a5
ruby/ql/lib/codeql/ruby/security/UnsafeCodeConstructionCustomizations.qll
@@ -62,13 +62,14 @@ module UnsafeCodeConstruction {
62
*/
63
class ArrayJoin extends Sink {
64
Concepts::CodeExecution s;
65
- DataFlow::CallNode call;
66
67
ArrayJoin() {
68
- call.getMethodName() = "join" and
69
- call.getNumberOfArguments() = 1 and // any string. E.g. ";" or "\n".
70
- call = getANodeExecutedAsCode(s) and
71
- this = call.getReceiver()
+ exists(DataFlow::CallNode call |
+ call.getMethodName() = "join" and
+ call.getNumberOfArguments() = 1 and // any string. E.g. ";" or "\n".
+ call = getANodeExecutedAsCode(s) and
+ this = call.getReceiver()
72
+ )
73
}
74
75
override DataFlow::Node getCodeSink() { result = s }
0 commit comments