mirror of
https://github.com/github/codeql.git
synced 2026-01-24 11:52:56 +01:00
21 lines
557 B
Plaintext
21 lines
557 B
Plaintext
/**
|
|
* @name Value shadowing: server variable
|
|
* @description Finds ambiguous accesses to server variables
|
|
* @kind problem
|
|
* @problem.severity warning
|
|
* @precision medium
|
|
* @id cs/web/ambiguous-server-variable
|
|
* @tags security
|
|
* maintainability
|
|
* frameworks/asp.net
|
|
*/
|
|
|
|
import csharp
|
|
import semmle.code.csharp.frameworks.system.web.Http
|
|
|
|
from IndexerAccess ia
|
|
where
|
|
ia.getTarget().getDeclaringType().hasQualifiedName("System.Web", "HttpRequest") and
|
|
isServerVariable(ia.getIndex(0))
|
|
select ia, "Ambiguous access to server variable."
|