Skip to content

Commit 06a5db4

Browse files
committed
Go: SafeUrlFlow
1 parent f899c3a commit 06a5db4

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

go/ql/lib/semmle/go/security/SafeUrlFlow.qll

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,7 @@ module SafeUrlFlow {
3838
}
3939

4040
predicate observeDiffInformedIncrementalMode() {
41-
any() // TODO: Make sure that the location overrides match the query's select clause: Column 1 selects sink.getARequest (/Users/d10c/src/semmle-code/ql/go/ql/src/Security/CWE-918/RequestForgery.ql@25:8:25:14), Column 5 does not select a source or sink originating from the flow call on line 24 (/Users/d10c/src/semmle-code/ql/go/ql/src/Security/CWE-601/OpenUrlRedirect.ql@26:3:26:18), Column 7 does not select a source or sink originating from the flow call on line 24 (/Users/d10c/src/semmle-code/ql/go/ql/src/Security/CWE-918/RequestForgery.ql@26:52:26:57)
42-
}
43-
44-
Location getASelectedSourceLocation(DataFlow::Node source) {
45-
none() // TODO: Make sure that this source location matches the query's select clause: Column 1 selects sink.getARequest (/Users/d10c/src/semmle-code/ql/go/ql/src/Security/CWE-918/RequestForgery.ql@25:8:25:14), Column 5 does not select a source or sink originating from the flow call on line 24 (/Users/d10c/src/semmle-code/ql/go/ql/src/Security/CWE-601/OpenUrlRedirect.ql@26:3:26:18), Column 7 does not select a source or sink originating from the flow call on line 24 (/Users/d10c/src/semmle-code/ql/go/ql/src/Security/CWE-918/RequestForgery.ql@26:52:26:57)
41+
none() // only used as secondary configuration
4642
}
4743
}
4844

0 commit comments

Comments
 (0)