We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 69ca49f commit eb7e1deCopy full SHA for eb7e1de
ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll
@@ -50,7 +50,7 @@ class Configuration extends TaintTracking::Configuration {
50
override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) {
51
exists(DataFlow::CallNode cn |
52
cn.getMethodName() = "unicode_normalize" and
53
- cn.getArgument(0).toString() = [":nfkc", ":nfc"] and
+ cn.getArgument(0).getConstantValue().getSymbol() = [":nfkc", ":nfc"] and
54
sink = cn.getReceiver()
55
) and
56
state instanceof PostValidation
0 commit comments