Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 445241f commit 2e80926Copy full SHA for 2e80926
1 file changed
ruby/ql/lib/codeql/ruby/security/XSS.qll
@@ -62,7 +62,7 @@ private module Shared {
62
*/
63
class HtmlSafeCallAsSink extends Sink {
64
HtmlSafeCallAsSink() {
65
- exists(HtmlSafeCall c, ErbOutputDirective d |
+ exists(Rails::HtmlSafeCall c, ErbOutputDirective d |
66
this.asExpr().getExpr() = c.getReceiver() and
67
c = d.getTerminalStmt()
68
)
@@ -160,7 +160,7 @@ private module Shared {
160
161
pragma[noinline]
162
private predicate renderCallLocals(string hashKey, Expr value, ErbFile erb) {
163
- exists(RenderCall call, Pair kvPair |
+ exists(Rails::RenderCall call, Pair kvPair |
164
call.getLocals().getAKeyValuePair() = kvPair and
165
kvPair.getValue() = value and
166
kvPair.getKey().getConstantValue().isStringlikeValue(hashKey) and
0 commit comments