We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 270a435 commit 701676eCopy full SHA for 701676e
javascript/ql/lib/semmle/javascript/frameworks/Spife.qll
@@ -165,13 +165,12 @@ module Spife {
165
kind = "cookie"
166
or
167
// req.validatedBody.get('foo')
168
- exists(DataFlow::PropRead validated, DataFlow::MethodCallNode get |
169
- rh.getARequestSource().ref().getAPropertyRead() = validated and
170
- validated.getPropertyName().matches("validated%") and
171
- get.getReceiver() = validated and
172
- this = get and
173
- kind = "body"
174
- )
+ this =
+ rh.getARequestSource()
+ .ref()
+ .getAPropertyRead(any(string s | s.matches("validated%")))
+ .getAMethodCall("get") and
+ kind = "body"
175
}
176
177
override RouteHandler getRouteHandler() { result = rh }
0 commit comments