You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/codeql/codeql-language-guides/analyzing-data-flow-in-csharp.rst
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
Analyzing data flow in C#
4
4
=========================
5
5
6
-
You can use CodeQL to track the flow of data through a C# program to its use.
6
+
You can use CodeQL to track the flow of data through a C# program to its use.
7
7
8
8
About this article
9
9
------------------
@@ -216,7 +216,7 @@ Flow sources
216
216
217
217
The data flow library contains some predefined flow sources. The class ``PublicCallableParameterFlowSource`` (defined in module ``semmle.code.csharp.dataflow.flowsources.PublicCallableParameter``) represents data flow from public parameters, which is useful for finding security problems in a public API.
218
218
219
-
The class ``RemoteSourceFlow`` (defined in module ``semmle.code.csharp.dataflow.flowsources.Remote``) represents data flow from remote network inputs. This is useful for finding security problems in networked services.
219
+
The class ``RemoteFlowSource`` (defined in module ``semmle.code.csharp.dataflow.flowsources.Remote``) represents data flow from remote network inputs. This is useful for finding security problems in networked services.
220
220
221
221
Example
222
222
~~~~~~~
@@ -251,7 +251,7 @@ Class hierarchy
251
251
252
252
- ``PublicCallableParameter`` - a parameter to a public method/callable in a public class.
253
253
254
-
- ``RemoteSourceFlow`` - data flow from network/remote input.
254
+
- ``RemoteFlowSource`` - data flow from network/remote input.
255
255
256
256
- ``AspNetRemoteFlowSource`` - data flow from remote ASP.NET user input.
257
257
@@ -437,11 +437,11 @@ Exercise 2
437
437
438
438
class Configuration extends DataFlow::Configuration {
439
439
Configuration() { this="String to System.Uri" }
440
-
440
+
441
441
override predicate isSource(DataFlow::Node src) {
442
442
src.asExpr().hasValue()
443
443
}
444
-
444
+
445
445
override predicate isSink(DataFlow::Node sink) {
446
446
exists(Call c | c.getTarget().(Constructor).getDeclaringType().hasQualifiedName("System.Uri")
447
447
and sink.asExpr()=c.getArgument(0))
@@ -458,7 +458,7 @@ Exercise 3
458
458
.. code-block:: ql
459
459
460
460
class EnvironmentVariableFlowSource extends DataFlow::ExprNode {
0 commit comments