mirror of
https://github.com/github/codeql.git
synced 2026-04-29 10:45:15 +02:00
Update java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql
Co-authored-by: Chris Smowton <smowton@github.com>
This commit is contained in:
@@ -16,7 +16,7 @@ import semmle.code.java.dataflow.FlowSources
|
||||
import DataFlow::PathGraph
|
||||
|
||||
/**
|
||||
* Taint-tracking configuration tracing flow from obtain client ip to use the client ip.
|
||||
* Taint-tracking configuration tracing flow from obtaining a client ip from an HTTP header to a sensitive use.
|
||||
*/
|
||||
class UseOfLessTrustedSourceConfig extends TaintTracking::Configuration {
|
||||
UseOfLessTrustedSourceConfig() { this = "UseOfLessTrustedSourceConfig" }
|
||||
|
||||
Reference in New Issue
Block a user