hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 04:06:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update kind model validation

Browse Source
This commit is contained in:
Mathew Payne
2023-05-10 10:06:22 +01:00
parent 0f85b98cc7
commit 681623d631
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll
View File

@@ -211,7 +211,11 @@ module ModelValidation {
) )
or or
exists(string kind | sinkModel(_, _, _, _, _, _, _, kind, _) | exists(string kind | sinkModel(_, _, _, _, _, _, _, kind, _) |
not kind = ["code", "sql", "xss", "remote", "html"] and not kind =
[
"code", "command-injection", "html", "ldap-injection", "log-injection", "remote", "sql",
"url-redirection", "xss",
] and
not kind.matches("encryption-%") and not kind.matches("encryption-%") and
result = "Invalid kind \"" + kind + "\" in sink model." result = "Invalid kind \"" + kind + "\" in sink model."
) )