File tree Expand file tree Collapse file tree 2 files changed +5
-5
lines changed
lib/semmle/code/csharp/security/dataflow
src/Security Features/CWE-091 Expand file tree Collapse file tree 2 files changed +5
-5
lines changed Original file line number Diff line number Diff line change @@ -97,14 +97,14 @@ deprecated class UntrustedDataToExternalApiConfig extends TaintTracking::Configu
97
97
override predicate isSink ( DataFlow:: Node sink ) { sink instanceof ExternalApiDataNode }
98
98
}
99
99
100
- /** A configuration for tracking flow from `RemoteFlowSource `s to `ExternalApiDataNode`s. */
100
+ /** A configuration for tracking flow from `ThreatModelFlowSource `s to `ExternalApiDataNode`s. */
101
101
private module RemoteSourceToExternalApiConfig implements DataFlow:: ConfigSig {
102
- predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
102
+ predicate isSource ( DataFlow:: Node source ) { source instanceof ThreatModelFlowSource }
103
103
104
104
predicate isSink ( DataFlow:: Node sink ) { sink instanceof ExternalApiDataNode }
105
105
}
106
106
107
- /** A module for tracking flow from `RemoteFlowSource `s to `ExternalApiDataNode`s. */
107
+ /** A module for tracking flow from `ThreatModelFlowSource `s to `ExternalApiDataNode`s. */
108
108
module RemoteSourceToExternalApi = TaintTracking:: Global< RemoteSourceToExternalApiConfig > ;
109
109
110
110
/** A node representing untrusted data being passed to an external API. */
Original file line number Diff line number Diff line change 12
12
*/
13
13
14
14
import csharp
15
- import semmle.code.csharp.security.dataflow.flowsources.Remote
15
+ import semmle.code.csharp.security.dataflow.flowsources.FlowSources
16
16
import semmle.code.csharp.frameworks.system.Xml
17
17
import XmlInjection:: PathGraph
18
18
19
19
/**
20
20
* A taint-tracking configuration for untrusted user input used in XML.
21
21
*/
22
22
module XmlInjectionConfig implements DataFlow:: ConfigSig {
23
- predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
23
+ predicate isSource ( DataFlow:: Node source ) { source instanceof ThreatModelFlowSource }
24
24
25
25
predicate isSink ( DataFlow:: Node sink ) {
26
26
exists ( MethodCall mc |
You can’t perform that action at this time.
0 commit comments