Skip to content

Commit a382d08

Browse files
committed
PS: Don't raise an alert on all call operator node arguments.
1 parent 5b5f6ec commit a382d08

File tree

1 file changed

+1
-4
lines changed

1 file changed

+1
-4
lines changed

powershell/ql/lib/semmle/code/powershell/security/CommandInjectionCustomizations.qll

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,10 +39,7 @@ module CommandInjection {
3939
SystemCommandExecutionSink() {
4040
// An argument to a call
4141
exists(DataFlow::CallNode call |
42-
call.getName() = "Invoke-Expression"
43-
or
44-
call instanceof DataFlow::CallOperatorNode
45-
|
42+
call.getName() = "Invoke-Expression" and
4643
call.getAnArgument() = this
4744
)
4845
or

0 commit comments

Comments
 (0)