From 14ab30ce1f950ce4269a855689e23a3fb2f20258 Mon Sep 17 00:00:00 2001 From: dilanbhalla <35575727+dilanbhalla@users.noreply.github.com> Date: Thu, 6 Feb 2025 12:04:29 -0800 Subject: [PATCH] Update DoNotUseInvokeExpression.ql --- .../src/queries/security/cwe-078/DoNotUseInvokeExpression.ql | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/powershell/ql/src/queries/security/cwe-078/DoNotUseInvokeExpression.ql b/powershell/ql/src/queries/security/cwe-078/DoNotUseInvokeExpression.ql index c0b88293a01..561b776f5ff 100644 --- a/powershell/ql/src/queries/security/cwe-078/DoNotUseInvokeExpression.ql +++ b/powershell/ql/src/queries/security/cwe-078/DoNotUseInvokeExpression.ql @@ -5,7 +5,7 @@ * @problem.severity error * @security-severity 9.8 * @precision high - * @id powershell/do-not-use-invoke-expression + * @id powershell/microsoft-public/do-not-use-invoke-expression * @tags security */ import powershell @@ -13,4 +13,4 @@ import semmle.code.powershell.dataflow.DataFlow from CmdCall call where call.getName() = "Invoke-Expression" -select call, "Do not use Invoke-Expression. It is a command injection risk." \ No newline at end of file +select call, "Do not use Invoke-Expression. It is a command injection risk."