Skip to content

Commit 2ab9604

Browse files
committed
Update customizing-library-models-for-java-and-kotlin.rst
1 parent d96d713 commit 2ab9604

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -297,6 +297,8 @@ The first four values identify the callable (in this case a method) to be modele
297297
Threat models
298298
-------------
299299

300+
.. include:: ../reusables/beta-note-threat-models.rst
301+
300302
A threat model is a named class of dataflow sources that can be enabled or disabled independently. Threat models allow you to control the set of dataflow sources that you want to consider unsafe. For example, one codebase may only consider remote HTTP requests to be tainted, whereas another may also consider data from local files to be unsafe. You can use threat models to ensure that the relevant taint sources are used in a CodeQL analysis.
301303

302304
The ``kind`` property of the ``sourceModel`` determines which threat model a source is associated with. There are two main categories:

0 commit comments

Comments
 (0)