File tree Expand file tree Collapse file tree
csharp/ql/src/semmle/code/csharp
security/dataflow/flowsinks Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -91,9 +91,11 @@ module Sinks {
9191 exists ( MethodCall mc |
9292 mc .getTarget ( ) .getQualifiedName ( ) in [
9393 "ServiceStack.IRestClient.Get" , "ServiceStack.IRestClient.Put" ,
94- "ServiceStack.IRestClient.Post" , "ServiceStack.IRestClient.Delete" ,
95- "ServiceStack.IRestClient.Post" , "ServiceStack.IRestClient.Put" ,
96- "ServiceStack.IRestClient.Patch" , "ServiceStack.IRestClient.Send"
94+ "ServiceStack.IRestClient.Post" , "ServiceStack.IRestClient.Delete" ,
95+ "ServiceStack.IRestClient.Patch" , "ServiceStack.IRestClient.Send" ,
96+ "ServiceStack.IRestClientAsync.GetAsync" , "ServiceStack.IRestClientAsync.DeleteAsync" ,
97+ "ServiceStack.IRestClientAsync.PutAsync" , "ServiceStack.IRestClientAsync.PostAsync" ,
98+ "ServiceStack.IRestClientAsync.PatchAsync" , "ServiceStack.IRestClientAsync.CustomMethodAsync"
9799 ] and
98100 this .asExpr ( ) = mc .getAnArgument ( )
99101 )
Original file line number Diff line number Diff line change @@ -8,7 +8,6 @@ private import ExternalLocationSink
88private import Html
99private import semmle.code.csharp.security.dataflow.XSS
1010private import semmle.code.csharp.frameworks.system.web.UI
11- private import semmle.code.csharp.frameworks.ServiceStack:: Sinks
1211
1312/** A data flow sink of remote user output. */
1413abstract class RemoteFlowSink extends DataFlow:: Node { }
You can’t perform that action at this time.
0 commit comments