Skip to content

Commit c7349a3

Browse files
Napalysasgerf
andauthored
Update javascript/ql/lib/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll
Co-authored-by: Asger F <asgerf@github.com>
1 parent 4a691b7 commit c7349a3

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

javascript/ql/lib/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -892,10 +892,12 @@ module TaintedPath {
892892
TaintTracking::uriStep(node1, node2)
893893
or
894894
exists(DataFlow::CallNode decode |
895-
decode.getCalleeName() = "decodeURIComponent" or
896-
decode.getCalleeName() = "decodeURI" or
897-
decode.getCalleeName() = "escape" or
898-
decode.getCalleeName() = "unescape"
895+
decode = DataFlow::globalVarRef([
896+
"decodeURIComponent",
897+
"decodeURI",
898+
"escape",
899+
"unescape"])
900+
.getACall()
899901
|
900902
node1 = decode.getArgument(0) and
901903
node2 = decode

0 commit comments

Comments
 (0)