韭菜

Results 3 issues of 韭菜

The question is: When querying for the first parameter of file_put_contents obtained via $_GET, why does it match the second parameter of file_put_contents obtained via $_GET? ![Image](https://github.com/user-attachments/assets/e445fb38-b010-4faf-abc3-1282e7b20aaf)

bug

val source = cpg.call.code("\$_.*") val sink = cpg.call("unlink").argument val flows = sink.reachableByFlows(source) flows.p How can I filter out the preg_match function in flows? ![Image](https://github.com/user-attachments/assets/0d100129-264a-4260-a8e2-254b36dcb799)

Hello, I'm not familiar with `isAdditionalFlowStep`, so there might be some issues with the rule I wrote. Could you please help me take a look? ```java public class HashMap extends...

question