mirror of
https://github.com/github/codeql.git
synced 2026-04-25 08:45:14 +02:00
C#: No longer consider attribute collections as HTML sinks.
This commit is contained in:
@@ -56,13 +56,11 @@ class HtmlTextWriterSink extends HtmlSink {
|
||||
}
|
||||
|
||||
/**
|
||||
* An expression that is used as an argument to an HTML sink method on
|
||||
* `AttributeCollection`.
|
||||
* DEPRECATED: Attribute collections are no longer considered HTML sinks.
|
||||
*/
|
||||
class AttributeCollectionSink extends HtmlSink {
|
||||
deprecated class AttributeCollectionSink extends DataFlow::ExprNode {
|
||||
AttributeCollectionSink() {
|
||||
exists(SystemWebUIAttributeCollectionClass ac, Parameter p |
|
||||
p = ac.getAddMethod().getParameter(1) or
|
||||
p = ac.getItemProperty().getSetter().getParameter(0)
|
||||
|
|
||||
this.getExpr() = p.getAnAssignedArgument()
|
||||
|
||||
Reference in New Issue
Block a user