Document that MaD barriers for hardcoded credentials apply to all kinds

This commit is contained in:
Owen Mansel-Chan
2026-03-24 10:39:05 +00:00
parent 5762191832
commit 93231794ee

View File

@@ -133,6 +133,9 @@ module HardcodedCryptographicValue {
/**
* An externally modeled barrier for hard-coded cryptographic value vulnerabilities.
*
* Note that a sanitizer with kind `credentials-key` will sanitize flow to
* all sinks, not just sinks with the same kind.
*/
private class ModelsAsDataBarrier extends Barrier {
CryptographicValueKind kind;