mirror of
https://github.com/github/codeql.git
synced 2026-02-26 20:03:51 +01:00
20 lines
440 B
Plaintext
20 lines
440 B
Plaintext
import semmle.code.csharp.security.dataflow.flowsources.Stored
|
|
|
|
class StoredConfig extends TaintTracking::Configuration {
|
|
StoredConfig() {
|
|
this = "stored"
|
|
}
|
|
|
|
override predicate isSource(DataFlow::Node s) {
|
|
s instanceof StoredFlowSource
|
|
}
|
|
|
|
override predicate isSink(DataFlow::Node s) {
|
|
s.asExpr().fromSource()
|
|
}
|
|
}
|
|
|
|
from StoredConfig s, DataFlow::Node sink
|
|
where s.hasFlow(any(StoredFlowSource sfs), sink)
|
|
select sink
|