mirror of
https://github.com/github/codeql.git
synced 2026-01-29 06:12:58 +01:00
27 lines
477 B
Plaintext
27 lines
477 B
Plaintext
|
|
import python
|
|
|
|
import semmle.python.security.TaintTracking
|
|
|
|
/* Flow */
|
|
import semmle.python.security.strings.Untrusted
|
|
|
|
/* Sinks */
|
|
|
|
class AnySink extends TaintSink{
|
|
|
|
AnySink() {
|
|
this instanceof ControlFlowNode
|
|
}
|
|
|
|
override predicate sinks(TaintKind kind) { any() }
|
|
|
|
}
|
|
|
|
from TaintSource src, TaintSink sink
|
|
where src.flowsToSink(sink)
|
|
|
|
select sink.toString(), "This message wouldn't appear if the query were complete $@",
|
|
src.toString(), "nor this"
|
|
|