We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 31bed36 commit 2962727Copy full SHA for 2962727
1 file changed
ruby/ql/lib/codeql/ruby/frameworks/rack/internal/App.qll
@@ -18,16 +18,7 @@ private class PotentialRequestHandler extends DataFlow::CallableNode {
18
(
19
this.(DataFlow::MethodNode).getMethodName() = "call"
20
or
21
- not this instanceof DataFlow::MethodNode and
22
- exists(DataFlow::CallNode cn | cn.getMethodName() = "run" |
23
- this.(DataFlow::LocalSourceNode).flowsTo(cn.getArgument(0))
24
- or
25
- // TODO: `Proc.new` should automatically propagate flow from its block argument
26
- any(DataFlow::CallNode proc |
27
- proc = API::getTopLevelMember("Proc").getAnInstantiation() and
28
- proc.getBlock() = this
29
- ).(DataFlow::LocalSourceNode).flowsTo(cn.getArgument(0))
30
- )
+ this = API::getTopLevelCall("run").getArgument(0).asCallable()
31
)
32
}
33
0 commit comments