Skip to content

Commit 7f007e1

Browse files
committed
Minor refactor - removed unused argument
1 parent b90aba2 commit 7f007e1

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

go/ql/src/Security/CWE-079/HTMLTemplateEscapingPassthrough.ql

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,8 @@ class UnescapedType extends Type {
2626
/**
2727
* Holds if the sink is a data value argument of a template execution call.
2828
*/
29-
predicate isSinkToTemplateExec(DataFlow::Node sink, DataFlow::CallNode call) {
30-
exists(Method fn, string methodName |
29+
predicate isSinkToTemplateExec(DataFlow::Node sink) {
30+
exists(Method fn, string methodName, DataFlow::CallNode call |
3131
fn.hasQualifiedName("html/template", "Template", methodName) and
3232
call = fn.getACall()
3333
|
@@ -69,7 +69,7 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon
6969
}
7070

7171
predicate isSink(DataFlow::Node sink, FlowState state) {
72-
state.isAfterConversion(_) and isSinkToTemplateExec(sink, _)
72+
state.isAfterConversion(_) and isSinkToTemplateExec(sink)
7373
}
7474

7575
predicate isBarrier(DataFlow::Node node) {

0 commit comments

Comments
 (0)