File tree Expand file tree Collapse file tree 1 file changed +2
-4
lines changed
javascript/ql/src/semmle/javascript/security/dataflow Expand file tree Collapse file tree 1 file changed +2
-4
lines changed Original file line number Diff line number Diff line change @@ -304,12 +304,10 @@ module DomBasedXss {
304304 private class UriEncodingSanitizer extends Sanitizer , Shared:: UriEncodingSanitizer { }
305305
306306 /**
307- * Holds if there exists two dataflow edges to `succ`, where one edges is sanitized, and the other edge starts with `pred`.
307+ * Holds if there exists two dataflow edges to `succ`, where one edges is sanitized, and the other edge starts with `pred`.
308308 */
309309 predicate isOptionallySanitizedEdge ( DataFlow:: Node pred , DataFlow:: Node succ ) {
310- exists ( DataFlow:: CallNode sanitizer |
311- sanitizer .getCalleeName ( ) .regexpMatch ( "(?i).*sanitize.*" )
312- |
310+ exists ( HtmlSanitizerCall sanitizer |
313311 // sanitized = sanitize ? sanitizer(source) : source;
314312 exists ( ConditionalExpr branch , Variable var , VarAccess access |
315313 branch = succ .asExpr ( ) and access = var .getAnAccess ( )
You can’t perform that action at this time.
0 commit comments