Skip to content

[CSharp] Additional data extensions for sink models #13093

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcogs33 merged 16 commits into from
Jun 22, 2023
Merged

[CSharp] Additional data extensions for sink models #13093

Changes from 1 commit
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
8f39f02
feat: Additional models as data extensions
GeekMasher May 9, 2023
632e487
Add Command Injection support
GeekMasher May 9, 2023
e846572
Fix names
GeekMasher May 9, 2023
7b55955
Update change notes
GeekMasher May 9, 2023
0e93257
Fix Ldap class name
GeekMasher May 9, 2023
0f85b98
Update models to match new data extensions names
GeekMasher May 10, 2023
681623d
Update kind model validation
GeekMasher May 10, 2023
bffc233
Update release notes
GeekMasher May 10, 2023
c493e27
Update MaD sink kinds from main
GeekMasher Jun 8, 2023
8052b35
Merge branch 'main' into csharp-ext
GeekMasher Jun 8, 2023
861ac17
Update csharp/ql/lib/semmle/code/csharp/security/dataflow/CommandInje…
GeekMasher Jun 19, 2023
4597210
Update csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll
GeekMasher Jun 19, 2023
a6a86ac
Fix formatting for ExternalFlow
GeekMasher Jun 19, 2023
8347a41
Merge branch 'main' into csharp-ext
GeekMasher Jun 19, 2023
62b3d5e
Merge branch 'main' into csharp-ext
GeekMasher Jun 20, 2023
0fcc1cb
Merge branch 'main' into csharp-ext
GeekMasher Jun 22, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update csharp/ql/lib/semmle/code/csharp/security/dataflow/CommandInje… 
…ctionQuery.qll

Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>
  • Loading branch information
@GeekMasher @jcogs33
GeekMasher and jcogs33 authored Jun 19, 2023
commit 861ac177b828604ad56b3a81b24137e932e918f3
2 changes: 1 addition & 1 deletion csharp/ql/lib/semmle/code/csharp/security/dataflow/CommandInjectionQuery.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@ module CommandInjection = TaintTracking::Global<CommandInjectionConfig>;
/** A source of remote user input. */
class RemoteSource extends Source instanceof RemoteFlowSource { }

/** Command Injection sinks defined through CSV models. */
/** Command Injection sinks defined through Models as Data. */
private class ExternalCommandInjectionExprSink extends Sink {
ExternalCommandInjectionExprSink() { sinkNode(this, "command-injection") }
}
Expand Down