C#: No longer consider attribute collections as HTML sinks.

This commit is contained in:
Michael Nebel
2024-09-25 13:46:22 +02:00
parent 28c48fb471
commit d00e27916d

View File

@@ -56,13 +56,11 @@ class HtmlTextWriterSink extends HtmlSink {
}
/**
* An expression that is used as an argument to an HTML sink method on
* `AttributeCollection`.
* DEPRECATED: Attribute collections are no longer considered HTML sinks.
*/
class AttributeCollectionSink extends HtmlSink {
deprecated class AttributeCollectionSink extends DataFlow::ExprNode {
AttributeCollectionSink() {
exists(SystemWebUIAttributeCollectionClass ac, Parameter p |
p = ac.getAddMethod().getParameter(1) or
p = ac.getItemProperty().getSetter().getParameter(0)
|
this.getExpr() = p.getAnAssignedArgument()