Apply suggestions from code review

Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
This commit is contained in:
Owen Mansel-Chan
2026-03-24 22:06:53 +00:00
committed by GitHub
parent 7e6319d648
commit bedfe1e755

View File

@@ -134,11 +134,12 @@ module HardcodedCryptographicValue {
/**
* An externally modeled barrier for hard-coded cryptographic value vulnerabilities.
*
* Note that a sanitizer with kind `credentials-key` will sanitize flow to
* all sinks, not just sinks with the same kind.
* Note that a barrier will block flow to all hard-coded cryptographic value
* sinks, regardless of the `kind` that is specified. For example a barrier of
* kind `credentials-key` will block flow to a sink of kind `credentials-iv`.
*/
private class ModelsAsDataBarrier extends Barrier {
ModelsAsDataBarrier() { exists(string kind | barrierNode(this, "credentials-" + kind)) }
ModelsAsDataBarrier() { exists(CryptographicValueKind kind | barrierNode(this, "credentials-" + kind)) }
}
/**