We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 3efbbb3 commit d7c1be4Copy full SHA for d7c1be4
csharp/ql/lib/semmle/code/csharp/security/auth/InsecureDirectObjectReferenceQuery.qll
@@ -2,8 +2,6 @@
2
3
import csharp
4
import semmle.code.csharp.dataflow.flowsources.Remote
5
-import DataFlow as DF
6
-import TaintTracking as TT
7
import ActionMethods
8
9
/**
@@ -25,8 +23,8 @@ private predicate hasIdParameter(ActionMethod m) {
25
23
// handle cases like `Request.QueryString["Id"]`
26
24
exists(StringLiteral idStr, IndexerCall idx |
27
idStr.getValue().toLowerCase().matches(["%id", "%idx"]) and
28
- TT::localTaint(src, DataFlow::exprNode(idx.getQualifier())) and
29
- DF::localExprFlow(idStr, idx.getArgument(0))
+ TaintTracking::localTaint(src, DataFlow::exprNode(idx.getQualifier())) and
+ DataFlow::localExprFlow(idStr, idx.getArgument(0))
30
)
31
32
}
0 commit comments