Skip to content

Commit eb7e1de

Browse files
Sim4n6aibaars
andauthored
Update ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll
Co-authored-by: Arthur Baars <[email protected]>
1 parent 69ca49f commit eb7e1de

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

ruby/ql/lib/codeql/ruby/experimental/UnicodeBypassValidationQuery.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ class Configuration extends TaintTracking::Configuration {
5050
override predicate isSink(DataFlow::Node sink, DataFlow::FlowState state) {
5151
exists(DataFlow::CallNode cn |
5252
cn.getMethodName() = "unicode_normalize" and
53-
cn.getArgument(0).toString() = [":nfkc", ":nfc"] and
53+
cn.getArgument(0).getConstantValue().getSymbol() = [":nfkc", ":nfc"] and
5454
sink = cn.getReceiver()
5555
) and
5656
state instanceof PostValidation

0 commit comments

Comments
 (0)