mirror of
https://github.com/github/codeql.git
synced 2025-12-21 19:26:31 +01:00
78ddb37a8c
This commit adds type information to data flow paths, by mapping node types onto the smaller set of GVN types, and implementing `ppReprType()`. The effect is a mere change in `DataFlow::PathNode::toString()`; no type-based pruning is done yet.
16 lines
2.2 KiB
Plaintext
16 lines
2.2 KiB
Plaintext
edges
|
|
| StoredXPathInjection.cs:24:39:24:65 | call to method GetString : String | StoredXPathInjection.cs:27:45:27:148 | ... + ... |
|
|
| StoredXPathInjection.cs:24:39:24:65 | call to method GetString : String | StoredXPathInjection.cs:30:41:30:144 | ... + ... |
|
|
| StoredXPathInjection.cs:25:39:25:65 | call to method GetString : String | StoredXPathInjection.cs:27:45:27:148 | ... + ... |
|
|
| StoredXPathInjection.cs:25:39:25:65 | call to method GetString : String | StoredXPathInjection.cs:30:41:30:144 | ... + ... |
|
|
nodes
|
|
| StoredXPathInjection.cs:24:39:24:65 | call to method GetString : String | semmle.label | call to method GetString : String |
|
|
| StoredXPathInjection.cs:25:39:25:65 | call to method GetString : String | semmle.label | call to method GetString : String |
|
|
| StoredXPathInjection.cs:27:45:27:148 | ... + ... | semmle.label | ... + ... |
|
|
| StoredXPathInjection.cs:30:41:30:144 | ... + ... | semmle.label | ... + ... |
|
|
#select
|
|
| StoredXPathInjection.cs:27:45:27:148 | ... + ... | StoredXPathInjection.cs:24:39:24:65 | call to method GetString : String | StoredXPathInjection.cs:27:45:27:148 | ... + ... | $@ flows to here and is used in an XPath expression. | StoredXPathInjection.cs:24:39:24:65 | call to method GetString | Stored user-provided value |
|
|
| StoredXPathInjection.cs:27:45:27:148 | ... + ... | StoredXPathInjection.cs:25:39:25:65 | call to method GetString : String | StoredXPathInjection.cs:27:45:27:148 | ... + ... | $@ flows to here and is used in an XPath expression. | StoredXPathInjection.cs:25:39:25:65 | call to method GetString | Stored user-provided value |
|
|
| StoredXPathInjection.cs:30:41:30:144 | ... + ... | StoredXPathInjection.cs:24:39:24:65 | call to method GetString : String | StoredXPathInjection.cs:30:41:30:144 | ... + ... | $@ flows to here and is used in an XPath expression. | StoredXPathInjection.cs:24:39:24:65 | call to method GetString | Stored user-provided value |
|
|
| StoredXPathInjection.cs:30:41:30:144 | ... + ... | StoredXPathInjection.cs:25:39:25:65 | call to method GetString : String | StoredXPathInjection.cs:30:41:30:144 | ... + ... | $@ flows to here and is used in an XPath expression. | StoredXPathInjection.cs:25:39:25:65 | call to method GetString | Stored user-provided value |
|