We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents 2951ae9 + 7f65980 commit 4b947dbCopy full SHA for 4b947db
rust/ql/lib/codeql/rust/security/TaintedPathExtensions.qll
@@ -69,7 +69,8 @@ module SanitizerGuard {
69
*/
70
private class DotDotCheck extends SanitizerGuard::Range, CfgNodes::MethodCallExprCfgNode {
71
DotDotCheck() {
72
- this.getAstNode().(Resolvable).getResolvedPath() = "<str>::contains" and
+ this.getAstNode().(CallExprBase).getStaticTarget().(Addressable).getCanonicalPath() =
73
+ ["<alloc::string::String>::contains", "<core::str>::contains"] and
74
this.getArgument(0).getAstNode().(LiteralExpr).getTextValue() =
75
["\"..\"", "\"../\"", "\"..\\\""]
76
}
0 commit comments