JS: Update prototype pollution query

asgerf · asgerf · commit 3ae33e3c1a2b · 2020-03-18T23:59:25.000Z
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/PrototypePollutionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/PrototypePollutionCustomizations.qll
@@ -74,7 +74,7 @@ module PrototypePollution {
   private class RemoteFlowAsSource extends Source {
     RemoteFlowAsSource() { this instanceof RemoteFlowSource }
 
-    override DataFlow::FlowLabel getAFlowLabel() { result.isData() }
+    override DataFlow::FlowLabel getAFlowLabel() { result.isTaint() }
   }
 
   /**

Original file line number	Diff line number	Diff line change
`@@ -74,7 +74,7 @@ module PrototypePollution {`
`74`	`74`	`private class RemoteFlowAsSource extends Source {`
`75`	`75`	`RemoteFlowAsSource() { this instanceof RemoteFlowSource }`
`76`	`76`
`77`		`- override DataFlow::FlowLabel getAFlowLabel() { result.isData() }`
	`77`	`+ override DataFlow::FlowLabel getAFlowLabel() { result.isTaint() }`
`78`	`78`	`}`
`79`	`79`
`80`	`80`	`/**`