We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent ffb22c0 commit f52c827Copy full SHA for f52c827
javascript/ql/src/semmle/javascript/frameworks/SQL.qll
@@ -74,10 +74,10 @@ private module MySql {
74
}
75
76
/** A call to the `escape` or `escapeId` method that performs SQL sanitization. */
77
- class EscapingSanitizer extends SQL::SqlSanitizer, @callexpr {
+ class EscapingSanitizer extends SQL::SqlSanitizer, MethodCallExpr {
78
EscapingSanitizer() {
79
- this = [mysql(), pool(), connection()].getAMemberCall(["escape", "escapeId"]).asExpr() and
80
- input = this.(MethodCallExpr).getArgument(0) and
+ this = [mysql(), pool(), connection()].getAMethodCall(["escape", "escapeId"]).asExpr() and
+ input = this.getArgument(0) and
81
output = this
82
83
0 commit comments