We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
Main
ThreatModelFlowSource
1 parent 55bd85e commit 441df72Copy full SHA for 441df72
csharp/ql/src/Security Features/CWE-114/AssemblyPathInjection.ql
@@ -21,10 +21,7 @@ import AssemblyPathInjection::PathGraph
21
* A taint-tracking configuration for untrusted user input used to load a DLL.
22
*/
23
module AssemblyPathInjectionConfig implements DataFlow::ConfigSig {
24
- predicate isSource(DataFlow::Node source) {
25
- source instanceof ThreatModelFlowSource or
26
- source.asExpr() = any(MainMethod main).getParameter(0).getAnAccess()
27
- }
+ predicate isSource(DataFlow::Node source) { source instanceof ThreatModelFlowSource }
28
29
predicate isSink(DataFlow::Node sink) {
30
exists(MethodCall mc, string name, int arg |
0 commit comments