File tree Expand file tree Collapse file tree 3 files changed +3
-3
lines changed Expand file tree Collapse file tree 3 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -29,7 +29,7 @@ DataFlow::SourceNode schemeOf(DataFlow::Node url) {
29
29
// url.split(":")[0]
30
30
exists ( StringSplitCall split |
31
31
split .getSeparator ( ) = ":" and
32
- result = split .getAnElementRead ( 0 ) and
32
+ result = split .getASubstringRead ( 0 ) and
33
33
url = split .getBaseString ( )
34
34
)
35
35
or
Original file line number Diff line number Diff line change @@ -178,5 +178,5 @@ class StringSplitCall extends DataFlow::MethodCallNode {
178
178
* Gets a read of the `i`th element from the split string.
179
179
*/
180
180
bindingset [ i]
181
- DataFlow:: Node getAnElementRead ( int i ) { result = getAPropertyRead ( i .toString ( ) ) }
181
+ DataFlow:: Node getASubstringRead ( int i ) { result = getAPropertyRead ( i .toString ( ) ) }
182
182
}
Original file line number Diff line number Diff line change @@ -285,7 +285,7 @@ module DomBasedXss {
285
285
StringSplitCall splitCall ;
286
286
287
287
QueryPrefixSanitizer ( ) {
288
- this = splitCall .getAnElementRead ( 0 ) and
288
+ this = splitCall .getASubstringRead ( 0 ) and
289
289
splitCall .getSeparator ( ) = "?" and
290
290
splitCall .getBaseString ( ) .getALocalSource ( ) = [ DOM:: locationRef ( ) , DOM:: locationRef ( ) .getAPropertyRead ( "href" ) ]
291
291
}
You can’t perform that action at this time.
0 commit comments