This commit is contained in:
Esben Sparre Andreasen
2022-02-10 14:42:30 +01:00
parent 03e1bcc8bc
commit 8a49b21160

View File

@@ -51,6 +51,6 @@ class ClientSuppliedIpUsedInSecurityCheckConfig extends TaintTracking::Configura
from
ClientSuppliedIpUsedInSecurityCheckConfig config, DataFlow::PathNode source,
DataFlow::PathNode sink
where none()
where config.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "IP address spoofing might include code from $@.",
source.getNode(), "this user input"