hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-25 00:27:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update DoNotUseInvokeExpression.ql

Browse Source
This commit is contained in:
dilanbhalla
2025-02-06 12:04:29 -08:00
committed by GitHub
parent c43b682862
commit 14ab30ce1f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
powershell/ql/src/queries/security/cwe-078/DoNotUseInvokeExpression.ql
View File

@@ -5,7 +5,7 @@
* @problem.severity error
* @security-severity 9.8
* @precision high
* @id powershell/do-not-use-invoke-expression
* @id powershell/microsoft-public/do-not-use-invoke-expression
* @tags security
*/
import powershell
@@ -13,4 +13,4 @@ import semmle.code.powershell.dataflow.DataFlow
from CmdCall call
where call.getName() = "Invoke-Expression"
select call, "Do not use Invoke-Expression. It is a command injection risk."
select call, "Do not use Invoke-Expression. It is a command injection risk."