github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 17:41:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Only flag up the deepest properties

Browse Source
This commit is contained in:
Henry Mercer
2023-05-30 19:50:56 +01:00
parent eb1c7a3887
commit 86ead5e019
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
queries/default-setup-event-context.ql
View File

@@ -25,7 +25,9 @@ class EventContextAccessConfiguration extends DataFlow::Configuration {
}
override predicate isSink(DataFlow::Node sink, DataFlow::FlowLabel lbl) {
sink instanceof DataFlow::PropRead and lbl instanceof ParsedLabel
sink instanceof DataFlow::PropRead and
lbl instanceof ParsedLabel and
not exists(DataFlow::PropRead n | sink = n.getBase())
}
override predicate isAdditionalFlowStep(