Skip to content

Commit f52c827

Browse files
asgerferik-krogh
andauthored
Apply suggestions from code review
Base type of EscapingSanitizer Co-authored-by: Erik Krogh Kristensen <[email protected]>
1 parent ffb22c0 commit f52c827

File tree

1 file changed

+3
-3
lines changed
  • javascript/ql/src/semmle/javascript/frameworks

1 file changed

+3
-3
lines changed

javascript/ql/src/semmle/javascript/frameworks/SQL.qll

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -74,10 +74,10 @@ private module MySql {
7474
}
7575

7676
/** A call to the `escape` or `escapeId` method that performs SQL sanitization. */
77-
class EscapingSanitizer extends SQL::SqlSanitizer, @callexpr {
77+
class EscapingSanitizer extends SQL::SqlSanitizer, MethodCallExpr {
7878
EscapingSanitizer() {
79-
this = [mysql(), pool(), connection()].getAMemberCall(["escape", "escapeId"]).asExpr() and
80-
input = this.(MethodCallExpr).getArgument(0) and
79+
this = [mysql(), pool(), connection()].getAMethodCall(["escape", "escapeId"]).asExpr() and
80+
input = this.getArgument(0) and
8181
output = this
8282
}
8383
}

0 commit comments

Comments
 (0)