JS/SSRF

d10c · d10c · commit 990bc5ed1f7c · 2025-10-14T13:53:11.000+02:00
javascript/ql/src/experimental/Security/CWE-918/SSRF.ql
diff --git a/javascript/ql/src/experimental/Security/CWE-918/SSRF.qll b/javascript/ql/src/experimental/Security/CWE-918/SSRF.qll
@@ -29,10 +29,6 @@ module SsrfConfig implements DataFlow::ConfigSig {
 
   predicate isBarrierOut(DataFlow::Node node) { strictSanitizingPrefixEdge(node, _) }
 
-  Location getASelectedSourceLocation(DataFlow::Node source) {
-    none() // Does not select the source
-  }
-
   predicate observeDiffInformedIncrementalMode() { any() }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -29,10 +29,6 @@ module SsrfConfig implements DataFlow::ConfigSig {`
`29`	`29`
`30`	`30`	`predicate isBarrierOut(DataFlow::Node node) { strictSanitizingPrefixEdge(node, _) }`
`31`	`31`
`32`		`- Location getASelectedSourceLocation(DataFlow::Node source) {`
`33`		`- none() // Does not select the source`
`34`		`- }`
`35`		`-`
`36`	`32`	`predicate observeDiffInformedIncrementalMode() { any() }`
`37`	`33`	`}`
`38`	`34`