diff --git a/ql/src/semmle/go/dataflow/internal/tainttracking1/TaintTrackingImpl.qll b/ql/src/semmle/go/dataflow/internal/tainttracking1/TaintTrackingImpl.qll index b509fad9cd2..450a9ba7e1f 100644 --- a/ql/src/semmle/go/dataflow/internal/tainttracking1/TaintTrackingImpl.qll +++ b/ql/src/semmle/go/dataflow/internal/tainttracking1/TaintTrackingImpl.qll @@ -92,7 +92,9 @@ abstract class Configuration extends DataFlow::Configuration { /** Holds if taint propagation through nodes guarded by `guard` is prohibited. */ predicate isSanitizerGuard(DataFlow::BarrierGuard guard) { none() } - final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) { isSanitizerGuard(guard) } + final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) { + isSanitizerGuard(guard) or defaultTaintSanitizerGuard(guard) + } /** * Holds if the additional taint propagation step from `node1` to `node2` diff --git a/ql/src/semmle/go/dataflow/internal/tainttracking2/TaintTrackingImpl.qll b/ql/src/semmle/go/dataflow/internal/tainttracking2/TaintTrackingImpl.qll index b509fad9cd2..450a9ba7e1f 100644 --- a/ql/src/semmle/go/dataflow/internal/tainttracking2/TaintTrackingImpl.qll +++ b/ql/src/semmle/go/dataflow/internal/tainttracking2/TaintTrackingImpl.qll @@ -92,7 +92,9 @@ abstract class Configuration extends DataFlow::Configuration { /** Holds if taint propagation through nodes guarded by `guard` is prohibited. */ predicate isSanitizerGuard(DataFlow::BarrierGuard guard) { none() } - final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) { isSanitizerGuard(guard) } + final override predicate isBarrierGuard(DataFlow::BarrierGuard guard) { + isSanitizerGuard(guard) or defaultTaintSanitizerGuard(guard) + } /** * Holds if the additional taint propagation step from `node1` to `node2`