JS: Restrict AP length in ExceptionXss

asgerf · asgerf · commit 7ccb476b1bcf · 2025-01-06T14:28:58.000+01:00
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/ExceptionXssQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/ExceptionXssQuery.qll
@@ -153,6 +153,8 @@ module ExceptionXssConfig implements DataFlow::StateConfigSig {
     canThrowSensitiveInformation(node1) and
     node2 = getExceptionTarget(node1)
   }
+
+  int accessPathLimit() { result = 1 }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -153,6 +153,8 @@ module ExceptionXssConfig implements DataFlow::StateConfigSig {`
`153`	`153`	`canThrowSensitiveInformation(node1) and`
`154`	`154`	`node2 = getExceptionTarget(node1)`
`155`	`155`	`}`
	`156`	`+`
	`157`	`+ int accessPathLimit() { result = 1 }`
`156`	`158`	`}`
`157`	`159`
`158`	`160`	`/**`