Java: Exclude source-to-source flow in 5 queries.

This commit is contained in:
Anders Schack-Mulligen
2023-07-17 09:06:49 +02:00
parent 1c8297b91b
commit 6770d2a49b
5 changed files with 12 additions and 0 deletions

View File

@@ -51,6 +51,8 @@ module RequestForgeryConfig implements DataFlow::ConfigSig {
}
predicate isBarrier(DataFlow::Node node) { node instanceof RequestForgerySanitizer }
predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
}
module RequestForgeryFlow = TaintTracking::Global<RequestForgeryConfig>;