From 4f11913ee53aab76fff8457007c2bf83bce8b6ae Mon Sep 17 00:00:00 2001
From: "REDMOND\\brodes" <brodes@microsoft.com>
Date: Fri, 6 Feb 2026 11:23:58 -0500
Subject: [PATCH] removing SSRFSink.qll

---
 .../lib/semmle/python/frameworks/SSRFSink.qll | 42 -------------------
 1 file changed, 42 deletions(-)
 delete mode 100644 python/ql/lib/semmle/python/frameworks/SSRFSink.qll

diff --git a/python/ql/lib/semmle/python/frameworks/SSRFSink.qll b/python/ql/lib/semmle/python/frameworks/SSRFSink.qll
deleted file mode 100644
index aeb228daf13..00000000000
--- a/python/ql/lib/semmle/python/frameworks/SSRFSink.qll
+++ /dev/null
@@ -1,42 +0,0 @@
-/**
- * Provides classes for SSRF sinks modeled using Models as Data (MaD).
- */
-
-private import python
-private import semmle.python.Concepts
-private import semmle.python.ApiGraphs
-private import semmle.python.frameworks.data.ModelsAsData
-
-/**
- * INTERNAL: Do not use.
- *
- * Sets up SSRF sinks as Http::Client::Request
- */
-module SsrfMaDModel {
-  /**
-   * An HTTP request modeled from `ssrf` sinks, modeled using MaD.
-   */
-  class SsrfSink extends Http::Client::Request::Range instanceof API::CallNode {
-    DataFlow::Node urlArg;
-
-    SsrfSink() {
-      (
-        this.getArg(_) = urlArg
-        or
-        this.getArgByName(_) = urlArg
-      ) and
-      urlArg = ModelOutput::getASinkNode("ssrf").asSink()
-    }
-
-    override DataFlow::Node getAUrlPart() { result = urlArg }
-
-    override string getFramework() { result = "MaD" }
-
-    override predicate disablesCertificateValidation(
-      DataFlow::Node disablingNode, DataFlow::Node argumentOrigin
-    ) {
-      // NOTE: if you need to define this, you have to special case it for every possible API in MaD
-      none()
-    }
-  }
-}