diff --git a/go/ql/lib/semmle/go/security/BrokenCryptoAlgorithmQuery.qll b/go/ql/lib/semmle/go/security/BrokenCryptoAlgorithmQuery.qll
index 2e400c76c85..ba24dcf5707 100644
--- a/go/ql/lib/semmle/go/security/BrokenCryptoAlgorithmQuery.qll
+++ b/go/ql/lib/semmle/go/security/BrokenCryptoAlgorithmQuery.qll
@@ -24,6 +24,8 @@ private module BrokenCryptoAlgorithmConfig implements DataFlow::ConfigSig {
 
   predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
 
+  predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
+
   predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
 
   predicate observeDiffInformedIncrementalMode() { any() }