mirror of
https://github.com/github/codeql.git
synced 2026-04-30 03:05:15 +02:00
fp case if encrypt set in initializer
This commit is contained in:
@@ -32,6 +32,11 @@ module InsecureSqlConnectionConfig implements DataFlow::ConfigSig {
|
||||
oc.getType().getName() = "SqlConnectionStringBuilder"
|
||||
or
|
||||
oc.getType().getName() = "SqlConnection"
|
||||
) and
|
||||
not exists(MemberInitializer mi |
|
||||
mi = oc.getInitializer().(ObjectInitializer).getAMemberInitializer() and
|
||||
mi.getLValue().(PropertyAccess).getTarget().getName() = "Encrypt" and
|
||||
mi.getRValue().(BoolLiteral).getValue() = "true"
|
||||
)
|
||||
)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user