Actions/OutputClobberingQuery

actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql uses source as endpoint
This commit is contained in:
Nora Dimitrijević
2025-10-08 13:21:04 +02:00
parent 8d49f26f3d
commit 3fa8259042

View File

@@ -212,8 +212,6 @@ private module OutputClobberingConfig implements DataFlow::ConfigSig {
}
predicate observeDiffInformedIncrementalMode() { any() }
Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
}
/** Tracks flow of unsafe user input that is used to construct and evaluate an environment variable. */