Debug isSink

jeongsoolee09 · jeongsoolee09 · commit c5c97408526a · 2025-06-24T09:37:28.000-04:00
diff --git a/javascript/frameworks/cap/lib/advanced_security/javascript/frameworks/cap/CAPCqlInjectionQuery.qll b/javascript/frameworks/cap/lib/advanced_security/javascript/frameworks/cap/CAPCqlInjectionQuery.qll
@@ -59,7 +59,7 @@ class CqlInjectionConfiguration extends TaintTracking::Configuration {
     or
     exists(AwaitExpr await, CqlClauseWithStringConcatParameter cqlClauseWithStringConcat |
       node = await.flow() and
-      await.getOperand() = cqlClauseWithStringConcat.(CqlClause).getArgument()
+      await.getOperand() = cqlClauseWithStringConcat.(CqlClause).asExpr()
     )
   }
 

Original file line number	Diff line number	Diff line change
`@@ -59,7 +59,7 @@ class CqlInjectionConfiguration extends TaintTracking::Configuration {`
`59`	`59`	`or`
`60`	`60`	`exists(AwaitExpr await, CqlClauseWithStringConcatParameter cqlClauseWithStringConcat \|`
`61`	`61`	`node = await.flow() and`
`62`		`- await.getOperand() = cqlClauseWithStringConcat.(CqlClause).getArgument()`
	`62`	`+ await.getOperand() = cqlClauseWithStringConcat.(CqlClause).asExpr()`
`63`	`63`	`)`
`64`	`64`	`}`
`65`	`65`