Files
codeql/csharp/ql/test/library-tests/dataflow/local/TaintTracking.ql
2018-08-02 17:53:23 +01:00

11 lines
295 B
Plaintext

import csharp
import Common
from MyFlowSource source, Access sink, string s
where
TaintTracking::localTaintStep+(source, DataFlow::exprNode(sink)) and
exists(MethodCall mc | mc.getTarget().getName() = "Check" and mc.getAnArgument() = sink) and
s = sink.toString()
select s
order by s asc