Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c6eaf19 commit ba5747dCopy full SHA for ba5747d
1 file changed
javascript/ql/src/Security/CWE-094/ExpressionInjection.ql
@@ -52,7 +52,8 @@ private predicate isExternalUserControlledComment(string context) {
52
53
bindingset[context]
54
private predicate isExternalUserControlledGollum(string context) {
55
- context.regexpMatch("\\bgithub\\s*\\.\\s*event\\s*\\.\\s*pages\\[[0-9]+\\]\\s*\\.\\s*page_name\\b") or
+ context
56
+ .regexpMatch("\\bgithub\\s*\\.\\s*event\\s*\\.\\s*pages\\[[0-9]+\\]\\s*\\.\\s*page_name\\b") or
57
context.regexpMatch("\\bgithub\\s*\\.\\s*event\\s*\\.\\s*pages\\[[0-9]+\\]\\s*\\.\\s*title\\b")
58
}
59
0 commit comments