add to isSanitizerGuard

erik-krogh · erik-krogh · commit dd5db2e6d71b · 2022-09-13T07:27:51.000+02:00
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
@@ -124,7 +124,8 @@ class Configuration extends TaintTracking::Configuration {
     guard instanceof TypeofCheck or
     guard instanceof NumberGuard or
     guard instanceof EqualityCheck or
-    guard instanceof IncludesCheck
+    guard instanceof IncludesCheck or
+    guard instanceof DenyListInclusionGuard
   }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -124,7 +124,8 @@ class Configuration extends TaintTracking::Configuration {`
`124`	`124`	`guard instanceof TypeofCheck or`
`125`	`125`	`guard instanceof NumberGuard or`
`126`	`126`	`guard instanceof EqualityCheck or`
`127`		`- guard instanceof IncludesCheck`
	`127`	`+ guard instanceof IncludesCheck or`
	`128`	`+ guard instanceof DenyListInclusionGuard`
`128`	`129`	`}`
`129`	`130`	`}`
`130`	`131`