We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 1fc58e5 commit e509385Copy full SHA for e509385
javascript/ql/src/experimental/Security/CWE-918/SSRF.qll
@@ -21,13 +21,14 @@ class Configuration extends TaintTracking::Configuration {
21
or
22
hasSanitizingSubstring(nd.getAPredecessor())
23
}
24
-
+
25
private predicate strictSanitizingPrefixEdge(DataFlow::Node source, DataFlow::Node sink) {
26
exists(DataFlow::Node operator, int n |
27
StringConcatenation::taintStep(source, sink, operator, n) and
28
hasSanitizingSubstring(StringConcatenation::getOperand(operator, [0 .. n - 1]))
29
)
30
31
32
override predicate isSanitizerEdge(DataFlow::Node source, DataFlow::Node sink) {
33
strictSanitizingPrefixEdge(source, sink)
34
0 commit comments