Skip to content

Commit 8284487

Browse files
committed
C#: Explicitly add QL Doc for the LdapInjectionConfig predicates.
1 parent 73cd751 commit 8284487

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

csharp/ql/lib/semmle/code/csharp/security/dataflow/LDAPInjectionQuery.qll

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,20 @@ deprecated class TaintTrackingConfiguration extends TaintTracking::Configuration
4343
* A taint-tracking configuration for unvalidated user input that is used to construct LDAP queries.
4444
*/
4545
module LdapInjectionConfig implements DataFlow::ConfigSig {
46+
/**
47+
* Holds if `source` is a relevant data flow source.
48+
*/
4649
predicate isSource(DataFlow::Node source) { source instanceof Source }
4750

51+
/**
52+
* Holds if `sink` is a relevant data flow sink.
53+
*/
4854
predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
4955

56+
/**
57+
* Holds if data flow through `node` is prohibited. This completely removes
58+
* `node` from the data flow graph.
59+
*/
5060
predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
5161
}
5262

0 commit comments

Comments
 (0)