V3

Author: am0o0

javascript/ql/lib/semmle/javascript/security/dataflow/CodeInjectionQuery.qll

@@ -18,8 +18,7 @@ class Configuration extends TaintTracking::Configuration {
 
   override predicate isSource(DataFlow::Node source) { source instanceof Source }
 
-  override predicate isSink(DataFlow::Node sink) { sink instanceof Sink and
-  sink.getFile().getLocation().toString().matches("%script%") }
+  override predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
 
   override predicate isSanitizer(DataFlow::Node node) {
     super.isSanitizer(node) or