We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8d60ae7 commit 9f43844Copy full SHA for 9f43844
1 file changed
javascript/ql/src/semmle/javascript/security/dataflow/TaintedPath.qll
@@ -134,15 +134,6 @@ module TaintedPath {
134
) {
135
isTaintedPathStep(src, dst, srclabel, dstlabel)
136
or
137
- // Introduce the specialized flow labels when approaching a specialized sanitizer guard.
138
- exists(TaintTracking::LabeledSanitizerGuardNode guard, Expr e |
139
- guard.sanitizes(_, e, any(Label::PosixPath label)) and
140
- src.(DataFlow::SourceNode).flowsToExpr(e) and
141
- dst = src and
142
- srclabel instanceof DataFlow::StandardFlowLabel and
143
- dstlabel instanceof Label::PosixPath
144
- )
145
- or
146
// Ignore all preliminary sanitization after decoding URI components
147
srclabel instanceof Label::PosixPath and
148
dstlabel instanceof Label::PosixPath and
0 commit comments