hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-23 04:06:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

C/C++: Don't force-include XxeFlowStateTransformer steps in XXE.ql.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2023-07-17 09:51:56 +02:00
parent ae24d68b5d
commit c01a494ea5
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cpp/ql/src/Security/CWE/CWE-611/XXE.ql
View File

@@ -43,6 +43,8 @@ module XxeConfig implements DataFlow::StateConfigSig {
// flowstate value. // flowstate value.
node.asIndirectExpr().(XxeFlowStateTransformer).transform(flowstate) != flowstate node.asIndirectExpr().(XxeFlowStateTransformer).transform(flowstate) != flowstate
} }
predicate neverSkip(DataFlow::Node node) { none() }
} }
module XxeFlow = DataFlow::GlobalWithState<XxeConfig>; module XxeFlow = DataFlow::GlobalWithState<XxeConfig>;