Actions/OutputClobberingQuery

d10c · d10c · commit 592dd00e9823 · 2025-10-14T17:03:00.000+02:00
actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql uses source as endpoint
diff --git a/actions/ql/lib/codeql/actions/security/OutputClobberingQuery.qll b/actions/ql/lib/codeql/actions/security/OutputClobberingQuery.qll
@@ -212,8 +212,6 @@ private module OutputClobberingConfig implements DataFlow::ConfigSig {
   }
 
   predicate observeDiffInformedIncrementalMode() { any() }
-
-  Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
 }
 
 /** Tracks flow of unsafe user input that is used to construct and evaluate an environment variable. */

Original file line number	Diff line number	Diff line change
`@@ -212,8 +212,6 @@ private module OutputClobberingConfig implements DataFlow::ConfigSig {`
`212`	`212`	`}`
`213`	`213`
`214`	`214`	`predicate observeDiffInformedIncrementalMode() { any() }`
`215`		`-`
`216`		`- Location getASelectedSourceLocation(DataFlow::Node sink) { none() }`
`217`	`215`	`}`
`218`	`216`
`219`	`217`	`/** Tracks flow of unsafe user input that is used to construct and evaluate an environment variable. */`