mirror of
https://github.com/github/codeql.git
synced 2026-04-20 22:44:52 +02:00
Rust: Add clarifying comment
This commit is contained in:
@@ -107,6 +107,12 @@ module ModelGeneratorInput implements ModelGeneratorInputSig<Location, RustDataF
|
||||
|
||||
predicate sinkModelSanitizer(DataFlow::Node node) { none() }
|
||||
|
||||
/**
|
||||
* Holds if `source` is an API entrypoint, i.e., a source of input where data
|
||||
* can flow in to a library. This is used for creating sink models, as we
|
||||
* only want to mark functions as sinks if input to the function can reach
|
||||
* (from an input source) a known sink.
|
||||
*/
|
||||
predicate apiSource(DataFlow::Node source) { source instanceof DataFlow::ParameterNode }
|
||||
|
||||
bindingset[sourceEnclosing, api]
|
||||
|
||||
Reference in New Issue
Block a user