Skip to content

Commit 6f87b1d

Browse files
committed
test
1 parent 9e69e02 commit 6f87b1d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -297,9 +297,9 @@ The first four values identify the callable (in this case a method) to be modele
297297
Threat models
298298
-------------
299299

300-
A threat model is a named class of dataflow sources that can be enabled or disabled independently. Threat models allow you to control the set of dataflow sources that you want to consider unsafe. For example, one codebase may only consider remote HTTP requests to be tainted, whereas another may also consider data from local files to be unsafe. You can use threat models to ensure that the relevant taint sources are used in a CodeQL analysis.
300+
.. include:: ../reusables/beta-note-model-packs-java.rst
301301

302-
.. include:: ../reusables/beta-note-threat-models.rst
302+
A threat model is a named class of dataflow sources that can be enabled or disabled independently. Threat models allow you to control the set of dataflow sources that you want to consider unsafe. For example, one codebase may only consider remote HTTP requests to be tainted, whereas another may also consider data from local files to be unsafe. You can use threat models to ensure that the relevant taint sources are used in a CodeQL analysis.
303303

304304
The ``kind`` property of the ``sourceModel`` determines which threat model a source is associated with. There are two main categories:
305305

0 commit comments

Comments
 (0)