File tree Expand file tree Collapse file tree 1 file changed +6
-4
lines changed
ql/lib/codeql/ruby/security Expand file tree Collapse file tree 1 file changed +6
-4
lines changed Original file line number Diff line number Diff line change @@ -185,18 +185,20 @@ private module Shared {
185
185
}
186
186
187
187
pragma [ noinline]
188
- private predicate isHelperMethodNameMatch ( ActionControllerHelperMethod helperMethod , MethodCall call ) {
188
+ private predicate isHelperMethodNameMatch (
189
+ ActionControllerHelperMethod helperMethod , MethodCall call
190
+ ) {
189
191
helperMethod .getName ( ) = call .getMethodName ( )
190
192
}
191
193
192
194
private predicate isFlowFromHelperMethod ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
193
195
// flow out of controller helper method into template
194
- exists ( ErbFile template |
195
- template = node2 .getLocation ( ) .getFile ( ) |
196
+ exists ( ErbFile template | template = node2 .getLocation ( ) .getFile ( ) |
196
197
exists ( ActionControllerHelperMethod helperMethod |
197
198
helperMethod .getControllerClass ( ) = getAssociatedControllerClass ( template ) and
198
199
// `node1` is an expr node that may be returned by the helper method
199
- exprNodeReturnedFrom ( node1 , helperMethod ) |
200
+ exprNodeReturnedFrom ( node1 , helperMethod )
201
+ |
200
202
exists ( CfgNodes:: ExprNodes:: MethodCallCfgNode helperMethodCall |
201
203
// `node2` is a call to the helper method
202
204
node2 .asExpr ( ) = helperMethodCall and
You can’t perform that action at this time.
0 commit comments