mirror of
https://github.com/github/codeql.git
synced 2025-12-19 18:33:16 +01:00
Will need subsequent PRs fixing up test failures (due to deprecated methods moving around), but other than that everything should be straight-forward.
14 lines
406 B
Plaintext
14 lines
406 B
Plaintext
/**
|
|
* @kind path-problem
|
|
*/
|
|
|
|
import python
|
|
import semmle.python.dataflow.TaintTracking
|
|
import TaintLib
|
|
import semmle.python.security.Paths
|
|
|
|
from RockPaperScissorConfig config, TaintedPathSource src, TaintedPathSink sink
|
|
where config.hasFlowPath(src, sink)
|
|
select sink.getSink(), src, sink, "$@ loses to $@.", src.getNode(), src.getTaintKind().toString(),
|
|
sink.getNode(), sink.getTaintKind().toString()
|