We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent d3ee658 commit 7d6abb4Copy full SHA for 7d6abb4
python/ql/lib/semmle/python/security/dataflow/ServerSideRequestForgeryQuery.qll
@@ -30,12 +30,10 @@ private module FullServerSideRequestForgeryConfig implements DataFlow::ConfigSig
30
node instanceof FullUrlControlSanitizer
31
}
32
33
- predicate observeDiffInformedIncrementalMode() { any() }
34
-
35
- Location getASelectedSinkLocation(DataFlow::Node sink) {
36
- result = sink.(Sink).getLocation()
37
- or
38
- result = sink.(Sink).getRequest().getLocation()
+ predicate observeDiffInformedIncrementalMode() {
+ // The partial request forgery query depends on `fullyControlledRequest` to reject alerts about
+ // such full-controlled requests, regardless of the associated source.
+ none()
39
40
41
0 commit comments