We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent fd3738b commit b76795fCopy full SHA for b76795f
csharp/ql/src/Security Features/CWE-134/UncontrolledFormatString.ql
@@ -17,11 +17,7 @@ import semmle.code.csharp.frameworks.Format
17
import FormatString::PathGraph
18
19
module FormatStringConfig implements DataFlow::ConfigSig {
20
- predicate isSource(DataFlow::Node source) {
21
- source instanceof RemoteFlowSource
22
- or
23
- source instanceof LocalFlowSource
24
- }
+ predicate isSource(DataFlow::Node source) { source instanceof ThreatModelFlowSource }
25
26
predicate isSink(DataFlow::Node sink) {
27
sink.asExpr() = any(FormatCall call | call.hasInsertions()).getFormatExpr()
0 commit comments