File tree Expand file tree Collapse file tree 1 file changed +2
-4
lines changed
javascript/ql/src/semmle/javascript/security/dataflow Expand file tree Collapse file tree 1 file changed +2
-4
lines changed Original file line number Diff line number Diff line change @@ -304,12 +304,10 @@ module DomBasedXss {
304
304
private class UriEncodingSanitizer extends Sanitizer , Shared:: UriEncodingSanitizer { }
305
305
306
306
/**
307
- * Holds if there exists two dataflow edges to `succ`, where one edges is sanitized, and the other edge starts with `pred`.
307
+ * Holds if there exists two dataflow edges to `succ`, where one edges is sanitized, and the other edge starts with `pred`.
308
308
*/
309
309
predicate isOptionallySanitizedEdge ( DataFlow:: Node pred , DataFlow:: Node succ ) {
310
- exists ( DataFlow:: CallNode sanitizer |
311
- sanitizer .getCalleeName ( ) .regexpMatch ( "(?i).*sanitize.*" )
312
- |
310
+ exists ( HtmlSanitizerCall sanitizer |
313
311
// sanitized = sanitize ? sanitizer(source) : source;
314
312
exists ( ConditionalExpr branch , Variable var , VarAccess access |
315
313
branch = succ .asExpr ( ) and access = var .getAnAccess ( )
You can’t perform that action at this time.
0 commit comments