C#: Allow encryption- prefix for sinks in CsvValidation.

2026-04-25 08:45:14 +02:00 · 2022-07-18 14:32:31 +02:00
parent 57ba0c4e5d
commit 6603024488
1 changed files with 1 additions and 0 deletions
--- a/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll
+++ b/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll
@@ -377,6 +377,7 @@ module CsvValidation {
    exists(string row, string kind | sinkModel(row) |
      kind = row.splitAt(";", 7) and
      not kind = ["code", "sql", "xss", "remote", "html"] and
+      not kind.matches("encryption-%") and
      msg = "Invalid kind \"" + kind + "\" in sink model."
    )
    or