We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 7c6ee5f commit ae00518Copy full SHA for ae00518
1 file changed
ruby/ql/lib/codeql/ruby/security/UnsafeHtmlConstructionQuery.qll
@@ -30,20 +30,4 @@ class Configuration extends TaintTracking::Configuration {
30
override DataFlow::FlowFeature getAFeature() {
31
result instanceof DataFlow::FeatureHasSourceCallContext
32
}
33
-
34
- override predicate isAdditionalTaintStep(DataFlow::Node pred, DataFlow::Node succ) {
35
- // if an array element gets tainted, then we treat the entire array as tainted
36
- exists(DataFlow::CallNode call |
37
- call.getMethodName() = ["<<", "push", "append"] and
38
- call.getReceiver() = succ and
39
- pred = call.getArgument(0) and
40
- call.getNumberOfArguments() = 1
41
- )
42
- or
43
44
- call.getMethodName() = "[]" and
45
- succ = call and
46
- pred = call.getArgument(_)
47
48
- }
49
0 commit comments