From 96cf4f16faeda1749ac7dc03362158b2ca0a2bea Mon Sep 17 00:00:00 2001 From: Ed Minnix Date: Wed, 29 Mar 2023 22:21:49 -0400 Subject: [PATCH] Documentation for ExternalAPIs --- java/ql/lib/semmle/code/java/security/ExternalAPIs.qll | 3 +++ 1 file changed, 3 insertions(+) diff --git a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll index 6e534b89c1d..89b24006475 100644 --- a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll +++ b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll @@ -111,6 +111,9 @@ deprecated class UntrustedDataToExternalApiConfig extends TaintTracking::Configu override predicate isSink(DataFlow::Node sink) { sink instanceof ExternalApiDataNode } } +/** + * Taint tracking configuration for flow from `RemoteFlowSource`s to `ExternalApiDataNode`s. + */ module UntrustedDataToExternalApiConfig implements DataFlow::ConfigSig { predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }