Push Sanitizer definition to ZipSlipCustomization.qll

gregxsunday · web-flow · commit 652c7ff1edb8 · 2023-02-17T12:49:31.000Z
diff --git a/ruby/ql/lib/codeql/ruby/security/ZipSlipQuery.qll b/ruby/ql/lib/codeql/ruby/security/ZipSlipQuery.qll
@@ -35,6 +35,6 @@ class Configuration extends TaintTracking::Configuration {
   }
 
   override predicate isSanitizer(DataFlow::Node node) {
-    node instanceof ZipSlip::Sanitizer or node instanceof Path::PathSanitization
+    node instanceof ZipSlip::Sanitizer
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -35,6 +35,6 @@ class Configuration extends TaintTracking::Configuration {`
`35`	`35`	`}`
`36`	`36`
`37`	`37`	`override predicate isSanitizer(DataFlow::Node node) {`
`38`		`- node instanceof ZipSlip::Sanitizer or node instanceof Path::PathSanitization`
	`38`	`+ node instanceof ZipSlip::Sanitizer`
`39`	`39`	`}`
`40`	`40`	`}`