hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove DataFlow::Node

Browse Source
This commit is contained in:
edvraa
2021-04-21 19:29:30 +03:00
parent a93d6a3ef6
commit 57689df5aa
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
csharp/ql/src/Security Features/CWE-502/UnsafeDeserialization.ql
View File

@@ -13,9 +13,7 @@
import csharp
import semmle.code.csharp.security.dataflow.UnsafeDeserialization::UnsafeDeserialization
from Call deserializeCall, DataFlow::Node sink
where
deserializeCall.getAnArgument() = sink.asExpr() and
sink instanceof Sink
from Call deserializeCall, Sink sink
where deserializeCall.getAnArgument() = sink.asExpr()
select deserializeCall,
"Unsafe deserializer is used. Make sure the value being deserialized comes from a trusted source."