We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9e28502 commit 4196230Copy full SHA for 4196230
python/ql/src/experimental/Security/UnsafeUnpackQuery.qll
@@ -84,11 +84,9 @@ class UnsafeUnpackingConfig extends TaintTracking::Configuration {
84
// see wget: https://pypi.org/project/wget/
85
exists(API::CallNode mcn |
86
mcn = API::moduleImport("wget").getMember("download").getACall() and
87
- (
88
- source = mcn.getArg(1)
89
- or
90
- source = mcn.getReturn().asSource() and not exists(Node arg | arg = mcn.getArg(1))
91
- )
+ if exists(Node arg | arg = mcn.getArg(1))
+ then source = mcn.getArg(1)
+ else source = mcn.getReturn().asSource()
92
)
93
or
94
// catch the Django uploaded files as a source
0 commit comments