This commit is contained in:
Esben Sparre Andreasen
2022-02-10 14:41:40 +01:00
parent ea86cce445
commit 03e1bcc8bc

View File

@@ -51,6 +51,6 @@ class ClientSuppliedIpUsedInSecurityCheckConfig extends TaintTracking::Configura
from
ClientSuppliedIpUsedInSecurityCheckConfig config, DataFlow::PathNode source,
DataFlow::PathNode sink
where config.hasFlowPath(source, sink)
where none()
select sink.getNode(), source, sink, "IP address spoofing might include code from $@.",
source.getNode(), "this user input"