Files
codeql/csharp/ql/test/library-tests/dataflow/global/Common.qll

19 lines
445 B
Plaintext

import csharp
class Config extends DataFlow::Configuration {
Config() { this = "Config" }
override predicate isSource(DataFlow::Node source) {
source.asExpr().(StringLiteral).getValue() = "taint source"
or
source.asParameter().hasName("tainted")
}
override predicate isSink(DataFlow::Node sink) {
exists(MethodCall mc |
mc.getTarget().getName() = "Check" and
mc.getAnArgument() = sink.asExpr()
)
}
}