File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
javascript/ql/src/semmle/javascript/frameworks Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -82,14 +82,14 @@ module Express {
8282 decoratee = call .getArgument ( i ) .getALocalSource ( ) and
8383 outer = call .getACallee ( ) and
8484 inner = outer .getAReturnedExpr ( ) and
85- forwardingCall ( DataFlow:: parameterNode ( outer .getParameter ( i ) ) , inner .flow ( ) )
85+ isAForwardingRouteHandlerCall ( DataFlow:: parameterNode ( outer .getParameter ( i ) ) , inner .flow ( ) )
8686 )
8787 }
8888
8989 /**
90- * Holds if a call to `callee` inside `f` forwards all of the parameters from `f` to that call.
90+ * Holds if `f` looks like a route-handler and a call to `callee` inside `f` forwards all of the parameters from `f` to that call,
9191 */
92- private predicate forwardingCall ( DataFlow:: SourceNode callee , HTTP:: RouteHandlerCandidate f ) {
92+ private predicate isAForwardingRouteHandlerCall ( DataFlow:: SourceNode callee , HTTP:: RouteHandlerCandidate f ) {
9393 exists ( DataFlow:: CallNode call | call = callee .getACall ( ) |
9494 forall ( int arg | arg = [ 0 .. f .getNumParameter ( ) - 1 ] |
9595 f .getParameter ( arg ) .flowsTo ( call .getArgument ( arg ) )
@@ -105,7 +105,7 @@ module Express {
105105 isDecoratedCall ( succ , pred )
106106 or
107107 // A forwarding call
108- forwardingCall ( pred , succ )
108+ isAForwardingRouteHandlerCall ( pred , succ )
109109 or
110110 // a container containing route-handlers.
111111 exists ( HTTP:: RouteHandlerCandidateContainer container | pred = container .getRouteHandler ( succ ) )
You can’t perform that action at this time.
0 commit comments