We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 08784d2 commit 06aefe0Copy full SHA for 06aefe0
ruby/ql/lib/codeql/ruby/frameworks/rack/internal/App.qll
@@ -91,12 +91,10 @@ module App {
91
/** A read of the query string via `env['QUERY_STRING']`. */
92
private class EnvQueryStringRead extends Http::Server::RequestInputAccess::Range {
93
EnvQueryStringRead() {
94
- exists(RequestHandler handler, DataFlow::ParameterNode env, ConstantValue key |
95
- handler.getEnv() = env
96
- |
97
- this = env.getAnElementRead(key) and
98
- key.isStringlikeValue("QUERY_STRING")
99
- )
+ this =
+ any(RequestHandler h)
+ .getEnv()
+ .getAnElementRead(ConstantValue::fromStringlikeValue("QUERY_STRING"))
100
}
101
102
override string getSourceType() { result = "Rack env" }
0 commit comments