From fac84ee9f3a451359db6da9908f4dfc63b8bf6fc Mon Sep 17 00:00:00 2001 From: Tom Hvitved Date: Thu, 11 Dec 2025 11:58:25 +0100 Subject: [PATCH] C#: Add `NHibernate` SQL sinks --- csharp/ql/lib/ext/NHibernate.model.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 csharp/ql/lib/ext/NHibernate.model.yml diff --git a/csharp/ql/lib/ext/NHibernate.model.yml b/csharp/ql/lib/ext/NHibernate.model.yml new file mode 100644 index 00000000000..472374cfbc3 --- /dev/null +++ b/csharp/ql/lib/ext/NHibernate.model.yml @@ -0,0 +1,8 @@ +extensions: + - addsTo: + pack: codeql/csharp-all + extensible: sinkModel + data: + - ["NHibernate", "ISession", True, "CreateSQLQuery", "(System.String)", "", "Argument[0]", "sql-injection", "manual"] + - ["NHibernate", "IStatelessSession", True, "CreateSQLQuery", "(System.String)", "", "Argument[0]", "sql-injection", "manual"] + - ["NHibernate.Impl", "AbstractSessionImpl", True, "CreateSQLQuery", "(System.String)", "", "Argument[0]", "sql-injection", "manual"] \ No newline at end of file