File tree Expand file tree Collapse file tree 1 file changed +0
-16
lines changed
ruby/ql/lib/codeql/ruby/security Expand file tree Collapse file tree 1 file changed +0
-16
lines changed Original file line number Diff line number Diff line change @@ -30,20 +30,4 @@ class Configuration extends TaintTracking::Configuration {
3030 override DataFlow:: FlowFeature getAFeature ( ) {
3131 result instanceof DataFlow:: FeatureHasSourceCallContext
3232 }
33-
34- override predicate isAdditionalTaintStep ( DataFlow:: Node pred , DataFlow:: Node succ ) {
35- // if an array element gets tainted, then we treat the entire array as tainted
36- exists ( DataFlow:: CallNode call |
37- call .getMethodName ( ) = [ "<<" , "push" , "append" ] and
38- call .getReceiver ( ) = succ and
39- pred = call .getArgument ( 0 ) and
40- call .getNumberOfArguments ( ) = 1
41- )
42- or
43- exists ( DataFlow:: CallNode call |
44- call .getMethodName ( ) = "[]" and
45- succ = call and
46- pred = call .getArgument ( _)
47- )
48- }
4933}
You can’t perform that action at this time.
0 commit comments