mirror of
https://github.com/github/codeql-action
synced 2026-10-09 05:05:21 +03:00
Only flag up the deepest properties
This commit is contained in:
@@ -25,7 +25,9 @@ class EventContextAccessConfiguration extends DataFlow::Configuration {
|
||||
}
|
||||
|
||||
override predicate isSink(DataFlow::Node sink, DataFlow::FlowLabel lbl) {
|
||||
sink instanceof DataFlow::PropRead and lbl instanceof ParsedLabel
|
||||
sink instanceof DataFlow::PropRead and
|
||||
lbl instanceof ParsedLabel and
|
||||
not exists(DataFlow::PropRead n | sink = n.getBase())
|
||||
}
|
||||
|
||||
override predicate isAdditionalFlowStep(
|
||||
|
||||
Reference in New Issue
Block a user