File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed
javascript/ql/src/semmle/javascript/frameworks Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change @@ -132,9 +132,7 @@ module Fastify {
132
132
string kind ;
133
133
134
134
RequestInputAccess ( ) {
135
- exists ( DataFlow:: PropRead read , string name |
136
- this = read and read = rh .getARequestSource ( ) .ref ( ) .getAPropertyRead ( name )
137
- |
135
+ exists ( string name | this = rh .getARequestSource ( ) .ref ( ) .getAPropertyRead ( name ) |
138
136
kind = "parameter" and
139
137
name = [ "params" , "query" ]
140
138
or
@@ -150,7 +148,8 @@ module Fastify {
150
148
override predicate isUserControlledObject ( ) {
151
149
kind = "body" and
152
150
(
153
- usesFastifyPlugin ( rh , DataFlow:: moduleImport ( [ "fastify-xml-body-parser" , "fastify-formbody" ] ) )
151
+ usesFastifyPlugin ( rh ,
152
+ DataFlow:: moduleImport ( [ "fastify-xml-body-parser" , "fastify-formbody" ] ) )
154
153
or
155
154
usesMiddleware ( rh ,
156
155
any ( ExpressLibraries:: BodyParser bodyParser | bodyParser .producesUserControlledObjects ( ) ) )
You can’t perform that action at this time.
0 commit comments