Skip to content

Commit e588e59

Browse files
committed
JS: fixup
1 parent c400b45 commit e588e59

File tree

1 file changed

+3
-4
lines changed
  • javascript/ql/src/semmle/javascript/frameworks

1 file changed

+3
-4
lines changed

javascript/ql/src/semmle/javascript/frameworks/Fastify.qll

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -132,9 +132,7 @@ module Fastify {
132132
string kind;
133133

134134
RequestInputAccess() {
135-
exists(DataFlow::PropRead read, string name |
136-
this = read and read = rh.getARequestSource().ref().getAPropertyRead(name)
137-
|
135+
exists(string name | this = rh.getARequestSource().ref().getAPropertyRead(name) |
138136
kind = "parameter" and
139137
name = ["params", "query"]
140138
or
@@ -150,7 +148,8 @@ module Fastify {
150148
override predicate isUserControlledObject() {
151149
kind = "body" and
152150
(
153-
usesFastifyPlugin(rh, DataFlow::moduleImport(["fastify-xml-body-parser", "fastify-formbody"]))
151+
usesFastifyPlugin(rh,
152+
DataFlow::moduleImport(["fastify-xml-body-parser", "fastify-formbody"]))
154153
or
155154
usesMiddleware(rh,
156155
any(ExpressLibraries::BodyParser bodyParser | bodyParser.producesUserControlledObjects()))

0 commit comments

Comments
 (0)