We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 6388ac5 commit ef21d1bCopy full SHA for ef21d1b
cpp/ql/src/Security/CWE/CWE-319/UseOfHttp.ql
@@ -60,6 +60,9 @@ class HttpStringToUrlOpenConfig extends TaintTracking::Configuration {
60
fc.getTarget().getName() = ["send", "URLDownloadToFile"] and
61
sink.asExpr() = fc.getArgument(1)
62
or
63
+ fc.getTarget().getName() = "curl_easy_setopt" and
64
+ sink.asExpr() = fc.getArgument(2)
65
+ or
66
fc.getTarget().getName() = "ShellExecute" and
67
sink.asExpr() = fc.getArgument(3)
68
)
0 commit comments