We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 9b969e1 commit a17b0d4Copy full SHA for a17b0d4
python/ql/src/experimental/Security/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql
@@ -39,10 +39,9 @@ class ClientSuppliedIpUsedInSecurityCheckConfig extends TaintTracking::Configura
39
40
override predicate isSanitizer(DataFlow::Node node) {
41
exists(Subscript ss |
42
- not ss.getIndex().(IntegerLiteral).getText() = "0" and
43
ss.getObject().(Call).getFunc().(Attribute).getName() = "split" and
44
- ss.getObject().(Call).getArg(0).(StrConst).getText() = "," and
45
- ss.getObject().(Call).getFunc().(Attribute).getObject() = node.asExpr()
+ ss.getObject().(Call).getAnArg().(StrConst).getText() = "," and
+ ss = node.asExpr()
46
)
47
}
48
0 commit comments