From 9006ddb793e6761326d88e068db7b8e52ed0664c Mon Sep 17 00:00:00 2001
From: BazookaMusic <bazookamusic@github.com>
Date: Tue, 12 May 2026 15:28:08 +0200
Subject: [PATCH] default threat model

---
 .../SystemPromptInjectionCustomizations.qll               | 8 +-------
 .../PromptInjection/UserPromptInjectionCustomizations.qll | 8 +-------
 2 files changed, 2 insertions(+), 14 deletions(-)

diff --git a/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/SystemPromptInjectionCustomizations.qll b/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/SystemPromptInjectionCustomizations.qll
index 9e6525ce03d..46326f43853 100644
--- a/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/SystemPromptInjectionCustomizations.qll
+++ b/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/SystemPromptInjectionCustomizations.qll
@@ -39,13 +39,7 @@ module SystemPromptInjection {
   /**
    * An active threat-model source, considered as a flow source.
    */
-  private class ActiveThreatModelSourceAsSource extends Source, ActiveThreatModelSource { 
-    ActiveThreatModelSourceAsSource()
-    {
-          this instanceof RemoteFlowSource
-          or
-          this.isClientSideSource()
-    }
+  private class ActiveThreatModelSourceAsSource extends Source, ActiveThreatModelSource {
   }
 
   /**
diff --git a/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/UserPromptInjectionCustomizations.qll b/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/UserPromptInjectionCustomizations.qll
index c72b3e225cd..e479817f299 100644
--- a/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/UserPromptInjectionCustomizations.qll
+++ b/javascript/ql/src/experimental/semmle/javascript/security/PromptInjection/UserPromptInjectionCustomizations.qll
@@ -40,13 +40,7 @@ module UserPromptInjection {
   /**
    * An active threat-model source, considered as a flow source.
    */
-  private class ActiveThreatModelSourceAsSource extends Source, ActiveThreatModelSource { 
-    ActiveThreatModelSourceAsSource()
-    {
-          this instanceof RemoteFlowSource
-          or
-          this.isClientSideSource()
-    }
+  private class ActiveThreatModelSourceAsSource extends Source, ActiveThreatModelSource {
   }
 
   /**