Skip to content

Commit bb8905b

Browse files
committed
add "valid" to the AdHocWhitelistCheckSanitizer
1 parent 8d41ce1 commit bb8905b

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -778,7 +778,8 @@ module TaintTracking {
778778
*/
779779
class AdHocWhitelistCheckSanitizer extends SanitizerGuardNode, DataFlow::CallNode {
780780
AdHocWhitelistCheckSanitizer() {
781-
getCalleeName().regexpMatch("(?i).*((?<!un)safe|whitelist|allow|(?<!un)auth(?!or\\b)).*") and
781+
getCalleeName()
782+
.regexpMatch("(?i).*((?<!un)safe|whitelist|valid|allow|(?<!un)auth(?!or\\b)).*") and
782783
getNumArgument() = 1
783784
}
784785

0 commit comments

Comments
 (0)