JS: decodeJwtWithoutVerification

Author: d10c

javascript/ql/src/experimental/Security/CWE-347/decodeJwtWithoutVerification.ql

@@ -29,11 +29,7 @@ module VerifiedDecodeConfig implements DataFlow::ConfigSig {
   predicate isSink(DataFlow::Node sink) { sink = verifiedDecode() }
 
   predicate observeDiffInformedIncrementalMode() {
-    any() // TODO: Make sure that the location overrides match the query's select clause: Column 5 does not select a source or sink originating from the flow call on line 39 (/Users/d10c/src/semmle-code/ql/javascript/ql/src/experimental/Security/CWE-347/decodeJwtWithoutVerification.ql@40:60:40:73)
-  }
-
-  Location getASelectedSinkLocation(DataFlow::Node sink) {
-    none() // TODO: Make sure that this sink location matches the query's select clause: Column 5 does not select a source or sink originating from the flow call on line 39 (/Users/d10c/src/semmle-code/ql/javascript/ql/src/experimental/Security/CWE-347/decodeJwtWithoutVerification.ql@40:60:40:73)
+    none() // used as secondary config
   }
 }