From c01a494ea515c32be2f7209a28bfbc8d70d6b107 Mon Sep 17 00:00:00 2001
From: Anders Schack-Mulligen <aschackmull@github.com>
Date: Mon, 17 Jul 2023 09:51:56 +0200
Subject: [PATCH] C/C++: Don't force-include XxeFlowStateTransformer steps in
 XXE.ql.

---
 cpp/ql/src/Security/CWE/CWE-611/XXE.ql | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/cpp/ql/src/Security/CWE/CWE-611/XXE.ql b/cpp/ql/src/Security/CWE/CWE-611/XXE.ql
index 6b73e50c963..50cd63acb40 100644
--- a/cpp/ql/src/Security/CWE/CWE-611/XXE.ql
+++ b/cpp/ql/src/Security/CWE/CWE-611/XXE.ql
@@ -43,6 +43,8 @@ module XxeConfig implements DataFlow::StateConfigSig {
     // flowstate value.
     node.asIndirectExpr().(XxeFlowStateTransformer).transform(flowstate) != flowstate
   }
+
+  predicate neverSkip(DataFlow::Node node) { none() }
 }
 
 module XxeFlow = DataFlow::GlobalWithState<XxeConfig>;