We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5b5f6ec commit a382d08Copy full SHA for a382d08
powershell/ql/lib/semmle/code/powershell/security/CommandInjectionCustomizations.qll
@@ -39,10 +39,7 @@ module CommandInjection {
39
SystemCommandExecutionSink() {
40
// An argument to a call
41
exists(DataFlow::CallNode call |
42
- call.getName() = "Invoke-Expression"
43
- or
44
- call instanceof DataFlow::CallOperatorNode
45
- |
+ call.getName() = "Invoke-Expression" and
46
call.getAnArgument() = this
47
)
48
or
0 commit comments