Update javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll

maikypedia · erik-krogh · web-flow · commit 8ba7ac678de6 · 2024-06-12T19:38:13.000+02:00
Co-authored-by: Erik Krogh Kristensen &lt;erik-krogh@github.com&gt;
diff --git a/javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll b/javascript/ql/src/experimental/Security/CWE-942/CorsPermissiveConfigurationCustomizations.qll
@@ -59,7 +59,7 @@ module CorsPermissiveConfiguration {
    */
   class CorsApolloServer extends Sink, DataFlow::ValueNode {
     CorsApolloServer() {
-      exists(Apollo::ApolloServer agql |
+      exists(ApolloServer agql |
         this =
           agql.getOptionArgument(0, "cors").getALocalSource().getAPropertyWrite("origin").getRhs()
       )

Original file line number	Diff line number	Diff line change
`@@ -59,7 +59,7 @@ module CorsPermissiveConfiguration {`
`59`	`59`	`*/`
`60`	`60`	`class CorsApolloServer extends Sink, DataFlow::ValueNode {`
`61`	`61`	`CorsApolloServer() {`
`62`		`- exists(Apollo::ApolloServer agql \|`
	`62`	`+ exists(ApolloServer agql \|`
`63`	`63`	`this =`
`64`	`64`	`agql.getOptionArgument(0, "cors").getALocalSource().getAPropertyWrite("origin").getRhs()`
`65`	`65`	`)`