Skip to content

Commit d7c1be4

Browse files
Fix codescanning alert by tweaking imported modules
1 parent 3efbbb3 commit d7c1be4

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

csharp/ql/lib/semmle/code/csharp/security/auth/InsecureDirectObjectReferenceQuery.qll

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,6 @@
22

33
import csharp
44
import semmle.code.csharp.dataflow.flowsources.Remote
5-
import DataFlow as DF
6-
import TaintTracking as TT
75
import ActionMethods
86

97
/**
@@ -25,8 +23,8 @@ private predicate hasIdParameter(ActionMethod m) {
2523
// handle cases like `Request.QueryString["Id"]`
2624
exists(StringLiteral idStr, IndexerCall idx |
2725
idStr.getValue().toLowerCase().matches(["%id", "%idx"]) and
28-
TT::localTaint(src, DataFlow::exprNode(idx.getQualifier())) and
29-
DF::localExprFlow(idStr, idx.getArgument(0))
26+
TaintTracking::localTaint(src, DataFlow::exprNode(idx.getQualifier())) and
27+
DataFlow::localExprFlow(idStr, idx.getArgument(0))
3028
)
3129
)
3230
}

0 commit comments

Comments
 (0)