File tree Expand file tree Collapse file tree
lib/semmle/code/csharp/security/dataflow
src/Security Features/CWE-091 Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -97,14 +97,14 @@ deprecated class UntrustedDataToExternalApiConfig extends TaintTracking::Configu
9797 override predicate isSink ( DataFlow:: Node sink ) { sink instanceof ExternalApiDataNode }
9898}
9999
100- /** A configuration for tracking flow from `RemoteFlowSource `s to `ExternalApiDataNode`s. */
100+ /** A configuration for tracking flow from `ThreatModelFlowSource `s to `ExternalApiDataNode`s. */
101101private module RemoteSourceToExternalApiConfig implements DataFlow:: ConfigSig {
102- predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
102+ predicate isSource ( DataFlow:: Node source ) { source instanceof ThreatModelFlowSource }
103103
104104 predicate isSink ( DataFlow:: Node sink ) { sink instanceof ExternalApiDataNode }
105105}
106106
107- /** A module for tracking flow from `RemoteFlowSource `s to `ExternalApiDataNode`s. */
107+ /** A module for tracking flow from `ThreatModelFlowSource `s to `ExternalApiDataNode`s. */
108108module RemoteSourceToExternalApi = TaintTracking:: Global< RemoteSourceToExternalApiConfig > ;
109109
110110/** A node representing untrusted data being passed to an external API. */
Original file line number Diff line number Diff line change 1212 */
1313
1414import csharp
15- import semmle.code.csharp.security.dataflow.flowsources.Remote
15+ import semmle.code.csharp.security.dataflow.flowsources.FlowSources
1616import semmle.code.csharp.frameworks.system.Xml
1717import XmlInjection:: PathGraph
1818
1919/**
2020 * A taint-tracking configuration for untrusted user input used in XML.
2121 */
2222module XmlInjectionConfig implements DataFlow:: ConfigSig {
23- predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
23+ predicate isSource ( DataFlow:: Node source ) { source instanceof ThreatModelFlowSource }
2424
2525 predicate isSink ( DataFlow:: Node sink ) {
2626 exists ( MethodCall mc |
You can’t perform that action at this time.
0 commit comments