Files
codeql/csharp/ql/test/library-tests/cil/dataflow/TaintTracking.ql
2018-08-02 17:53:23 +01:00

19 lines
506 B
Plaintext

import csharp
import semmle.code.csharp.dataflow.TaintTracking
class FlowConfig extends TaintTracking::Configuration {
FlowConfig() { this="FlowConfig" }
override predicate isSource(DataFlow::Node source) {
source.asExpr() instanceof Literal
}
override predicate isSink(DataFlow::Node sink) {
exists(LocalVariable decl | sink.asExpr()=decl.getInitializer())
}
}
from FlowConfig config, DataFlow::Node source, DataFlow::Node sink
where config.hasFlow(source, sink)
select source, sink