Skip to content

Commit ad754f1

Browse files
committed
use of all normalization forms without the ":" prefix
1 parent f5ff508 commit ad754f1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ class Configuration extends TaintTracking::Configuration {
5050
override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) {
5151
exists(DataFlow::CallNode cn |
5252
cn.getMethodName() = "unicode_normalize" and
53-
cn.getArgument(0).getConstantValue().getSymbol() = [":nfkc", ":nfc", ":nfkd", ":nfd"] and
53+
cn.getArgument(0).getConstantValue().getSymbol() = ["nfkc", "nfc", "nfkd", "nfd"] and
5454
sink = cn.getReceiver()
5555
) and
5656
state instanceof PostValidation

0 commit comments

Comments
 (0)