[DIFF-INFORMED] Go: AuthCookie

d10c · d10c · commit 8594d31f9b6b · 2025-07-17T10:55:36.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/go/ql/src/experimental/CWE-1004/CookieWithoutHttpOnly.ql#L97
diff --git a/go/ql/src/experimental/CWE-1004/AuthCookie.qll b/go/ql/src/experimental/CWE-1004/AuthCookie.qll
@@ -116,6 +116,12 @@ private module BoolToGinSetCookieTrackingConfig implements DataFlow::ConfigSig {
       )
     )
   }
+
+  predicate observeDiffInformedIncrementalMode() {
+    any() // Merged with other flows in CookieWithoutHttpOnly.ql
+  }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) { none() }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -116,6 +116,12 @@ private module BoolToGinSetCookieTrackingConfig implements DataFlow::ConfigSig {`
`116`	`116`	`)`
`117`	`117`	`)`
`118`	`118`	`}`
	`119`	`+`
	`120`	`+ predicate observeDiffInformedIncrementalMode() {`
	`121`	`+ any() // Merged with other flows in CookieWithoutHttpOnly.ql`
	`122`	`+ }`
	`123`	`+`
	`124`	`+ Location getASelectedSourceLocation(DataFlow::Node source) { none() }`
`119`	`125`	`}`
`120`	`126`
`121`	`127`	`/**`