Files
codeql/csharp/ql/test/library-tests/cil/dataflow/TaintTracking.ql
2018-12-20 10:19:59 +01:00

17 lines
504 B
Plaintext

import csharp
import semmle.code.csharp.dataflow.TaintTracking
class FlowConfig extends TaintTracking::Configuration {
FlowConfig() { this = "FlowConfig" }
override predicate isSource(DataFlow::Node source) { source.asExpr() instanceof Literal }
override predicate isSink(DataFlow::Node sink) {
exists(LocalVariable decl | sink.asExpr() = decl.getInitializer())
}
}
from FlowConfig config, DataFlow::Node source, DataFlow::Node sink
where config.hasFlow(source, sink)
select source, sink