Python: Use API::CallNode

tausbn · web-flow · commit ba8d73c2be19 · 2022-05-17T12:00:17.000Z
diff --git a/python/ql/src/Security/CWE-079/Jinja2WithoutEscaping.ql b/python/ql/src/Security/CWE-079/Jinja2WithoutEscaping.ql
@@ -37,7 +37,7 @@ DataFlow::Node getAutoEscapeParameter(DataFlow::CallCfgNode call) {
   result = call.getArgByName("autoescape")
 }
 
-from DataFlow::CallCfgNode call
+from API::CallNode call
 where
   call = jinja2EnvironmentOrTemplate().getACall() and
   not exists(call.asCfgNode().(CallNode).getNode().getStarargs()) and

Original file line number	Diff line number	Diff line change
`@@ -37,7 +37,7 @@ DataFlow::Node getAutoEscapeParameter(DataFlow::CallCfgNode call) {`
`37`	`37`	`result = call.getArgByName("autoescape")`
`38`	`38`	`}`
`39`	`39`
`40`		`-from DataFlow::CallCfgNode call`
	`40`	`+from API::CallNode call`
`41`	`41`	`where`
`42`	`42`	`call = jinja2EnvironmentOrTemplate().getACall() and`
`43`	`43`	`not exists(call.asCfgNode().(CallNode).getNode().getStarargs()) and`