hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-11 20:51:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

Allow MaD barriers relating to ExternalLocationSink

Browse Source
This commit is contained in:
Owen Mansel-Chan
2026-01-09 11:24:55 +00:00
parent 004d40ee93
commit b30bc5ea44
3 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
csharp/ql/lib/semmle/code/csharp/security/dataflow/CleartextStorageQuery.qll
View File

@@ -4,6 +4,7 @@
import csharp
private import semmle.code.csharp.security.dataflow.flowsources.Remote
private import semmle.code.csharp.dataflow.internal.ExternalFlow
private import semmle.code.csharp.frameworks.system.Web
private import semmle.code.csharp.security.SensitiveActions
private import semmle.code.csharp.security.dataflow.flowsinks.ExternalLocationSink
@@ -62,3 +63,5 @@ class ProtectSanitizer extends Sanitizer {
* An external location sink.
*/
class ExternalSink extends Sink instanceof ExternalLocationSink { }
private class ExternalSanitizer extends Sanitizer instanceof ExternalLocationSanitizer { }

2
csharp/ql/lib/semmle/code/csharp/security/dataflow/ExposureOfPrivateInformationQuery.qll
View File

@@ -46,3 +46,5 @@ private class PrivateDataSource extends Source {
}
private class ExternalLocation extends Sink instanceof ExternalLocationSink { }
private class ExternalSanitizer extends Sanitizer instanceof ExternalLocationSanitizer { }

8
csharp/ql/lib/semmle/code/csharp/security/dataflow/flowsinks/ExternalLocationSink.qll
View File

@@ -126,3 +126,11 @@ class LocalFileOutputSink extends ExternalLocationSink {
)
}
}
/**
* A sanitizer for writing data to locations that are external to the
* application, defined through Models as Data.
*/
class ExternalLocationSanitizer extends DataFlow::Node {
ExternalLocationSanitizer() { barrierNode(this, "file-content-store") }
}