We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b6cdae2 commit 3fa93e5Copy full SHA for 3fa93e5
1 file changed
rust/ql/src/queries/summary/TaintSources.ql
@@ -0,0 +1,17 @@
1
+/**
2
+ * @name Taint Sources
3
+ * @description List all sources of untrusted input that have been idenfitied
4
+ * in the database.
5
+ * @kind problem
6
+ * @problem.severity info
7
+ * @id rust/summary/taint-sources
8
+ * @tags summary
9
+ */
10
+
11
+import rust
12
+import codeql.rust.Concepts
13
14
+from ThreatModelSource s, string defaultString
15
+where
16
+ if s instanceof ActiveThreatModelSource then defaultString = ", DEFAULT" else defaultString = ""
17
+select s, s.getSourceType() + " (" + s.getThreatModel() + defaultString + ")"
0 commit comments