We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 28c48fb commit d00e279Copy full SHA for d00e279
csharp/ql/lib/semmle/code/csharp/security/dataflow/flowsinks/Html.qll
@@ -56,13 +56,11 @@ class HtmlTextWriterSink extends HtmlSink {
56
}
57
58
/**
59
- * An expression that is used as an argument to an HTML sink method on
60
- * `AttributeCollection`.
+ * DEPRECATED: Attribute collections are no longer considered HTML sinks.
61
*/
62
-class AttributeCollectionSink extends HtmlSink {
+deprecated class AttributeCollectionSink extends DataFlow::ExprNode {
63
AttributeCollectionSink() {
64
exists(SystemWebUIAttributeCollectionClass ac, Parameter p |
65
- p = ac.getAddMethod().getParameter(1) or
66
p = ac.getItemProperty().getSetter().getParameter(0)
67
|
68
this.getExpr() = p.getAnAssignedArgument()
0 commit comments