File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed
javascript/ql/src/semmle/javascript/frameworks Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change @@ -132,9 +132,7 @@ module Fastify {
132132 string kind ;
133133
134134 RequestInputAccess ( ) {
135- exists ( DataFlow:: PropRead read , string name |
136- this = read and read = rh .getARequestSource ( ) .ref ( ) .getAPropertyRead ( name )
137- |
135+ exists ( string name | this = rh .getARequestSource ( ) .ref ( ) .getAPropertyRead ( name ) |
138136 kind = "parameter" and
139137 name = [ "params" , "query" ]
140138 or
@@ -150,7 +148,8 @@ module Fastify {
150148 override predicate isUserControlledObject ( ) {
151149 kind = "body" and
152150 (
153- usesFastifyPlugin ( rh , DataFlow:: moduleImport ( [ "fastify-xml-body-parser" , "fastify-formbody" ] ) )
151+ usesFastifyPlugin ( rh ,
152+ DataFlow:: moduleImport ( [ "fastify-xml-body-parser" , "fastify-formbody" ] ) )
154153 or
155154 usesMiddleware ( rh ,
156155 any ( ExpressLibraries:: BodyParser bodyParser | bodyParser .producesUserControlledObjects ( ) ) )
You can’t perform that action at this time.
0 commit comments