diff --git a/ql/src/experimental/CWE-352/ConstantOauth2State.ql b/ql/src/experimental/CWE-352/ConstantOauth2State.ql index dfb8ad1c368..c715bf60b1d 100644 --- a/ql/src/experimental/CWE-352/ConstantOauth2State.ql +++ b/ql/src/experimental/CWE-352/ConstantOauth2State.ql @@ -50,6 +50,8 @@ class FlowToPrint extends DataFlow::Configuration { predicate isSink(DataFlow::Node sink, DataFlow::CallNode call) { exists(Fmt::Printer printer | call = printer.getACall() | sink = call.getArgument(_)) + or + exists(LoggerCall logCall | call = logCall | sink = logCall.getAMessageComponent()) } override predicate isSource(DataFlow::Node source) { isSource(source, _) }