File tree Expand file tree Collapse file tree 1 file changed +1
-6
lines changed
javascript/ql/src/experimental/Security/CWE-073 Expand file tree Collapse file tree 1 file changed +1
-6
lines changed Original file line number Diff line number Diff line change @@ -14,10 +14,6 @@ import javascript
1414import DataFlow:: PathGraph
1515import semmle.javascript.security.TaintedObject
1616
17- predicate isUsingHbsEngine ( ) {
18- Express:: appCreation ( ) .getAMethodCall ( "set" ) .getArgument ( 1 ) .mayHaveStringValue ( "hbs" )
19- }
20-
2117class TemplateObjInjectionConfig extends TaintTracking:: Configuration {
2218 TemplateObjInjectionConfig ( ) { this = "TemplateObjInjectionConfig" }
2319
@@ -32,8 +28,7 @@ class TemplateObjInjectionConfig extends TaintTracking::Configuration {
3228 exists ( MethodCallExpr mc |
3329 Express:: isResponse ( mc .getReceiver ( ) ) and
3430 mc .getMethodName ( ) = "render" and
35- sink .asExpr ( ) = mc .getArgument ( 1 ) and
36- isUsingHbsEngine ( )
31+ sink .asExpr ( ) = mc .getArgument ( 1 )
3732 )
3833 }
3934
You can’t perform that action at this time.
0 commit comments