Skip to content

Commit 7345df6

Browse files
committed
JS: Include DataFlow::AdditionalFlowStep in TaintSteps metric
1 parent 7993a83 commit 7345df6

File tree

1 file changed

+15
-5
lines changed

1 file changed

+15
-5
lines changed

javascript/ql/src/meta/analysis-quality/TaintSteps.ql

Lines changed: 15 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -11,12 +11,22 @@
1111
import javascript
1212
import CallGraphQuality
1313

14-
class BasicTaintConfiguration extends TaintTracking::Configuration {
15-
BasicTaintConfiguration() { this = "BasicTaintConfiguration" }
16-
}
17-
1814
predicate relevantStep(DataFlow::Node pred, DataFlow::Node succ) {
19-
any(BasicTaintConfiguration cfg).isAdditionalFlowStep(pred, succ) and
15+
(
16+
any(TaintTracking::AdditionalTaintStep dts).step(pred, succ)
17+
or
18+
any(DataFlow::AdditionalFlowStep cfg).step(pred, succ)
19+
or
20+
any(DataFlow::AdditionalFlowStep cfg).step(pred, succ, _, _)
21+
or
22+
any(DataFlow::AdditionalFlowStep cfg).loadStep(pred, succ, _)
23+
or
24+
any(DataFlow::AdditionalFlowStep cfg).storeStep(pred, succ, _)
25+
or
26+
any(DataFlow::AdditionalFlowStep cfg).loadStoreStep(pred, succ, _, _)
27+
or
28+
any(DataFlow::AdditionalFlowStep cfg).loadStoreStep(pred, succ, _)
29+
) and
2030
not pred.getFile() instanceof IgnoredFile and
2131
not succ.getFile() instanceof IgnoredFile
2232
}

0 commit comments

Comments
 (0)