Skip to content

Commit 7323d4e

Browse files
MathiasVPMathiasVP
authored
Merge pull request #13058 from geoffw0/barrier
Swift: Standardize terminology for ConfigSig queries
2 parents 0a20885 + 7c85115 commit 7323d4e

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

41 files changed

+176
-176
lines changed

‎swift/ql/lib/codeql/swift/security/CleartextLoggingExtensions.qll

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -8,18 +8,15 @@ private import codeql.swift.security.SensitiveExprs
88
/** A data flow sink for cleartext logging of sensitive data vulnerabilities. */
99
abstract class CleartextLoggingSink extends DataFlow::Node { }
1010

11-
/** A sanitizer for cleartext logging of sensitive data vulnerabilities. */
12-
abstract class CleartextLoggingSanitizer extends DataFlow::Node { }
11+
/** A barrier for cleartext logging of sensitive data vulnerabilities. */
12+
abstract class CleartextLoggingBarrier extends DataFlow::Node { }
1313

1414
/**
15-
* A unit class for adding additional taint steps.
16-
*
17-
* Extend this class to add additional taint steps that should apply to paths related to
18-
* cleartext logging of sensitive data vulnerabilities.
15+
* A unit class for adding additional flow steps.
1916
*/
20-
class CleartextLoggingAdditionalTaintStep extends Unit {
17+
class CleartextLoggingAdditionalFlowStep extends Unit {
2118
/**
22-
* Holds if the step from `n1` to `n2` should be considered a taint
19+
* Holds if the step from `n1` to `n2` should be considered a flow
2320
* step for flows related to cleartext logging of sensitive data vulnerabilities.
2421
*/
2522
abstract predicate step(DataFlow::Node n1, DataFlow::Node n2);
@@ -33,12 +30,12 @@ private class DefaultCleartextLoggingSink extends CleartextLoggingSink {
3330
}
3431

3532
/**
36-
* A sanitizer for `OSLogMessage`s configured with the appropriate privacy option.
33+
* A barrier for `OSLogMessage`s configured with the appropriate privacy option.
3734
* Numeric and boolean arguments aren't redacted unless the `private` or `sensitive` options are used.
3835
* Arguments of other types are always redacted unless the `public` option is used.
3936
*/
40-
private class OsLogPrivacyCleartextLoggingSanitizer extends CleartextLoggingSanitizer {
41-
OsLogPrivacyCleartextLoggingSanitizer() {
37+
private class OsLogPrivacyCleartextLoggingBarrier extends CleartextLoggingBarrier {
38+
OsLogPrivacyCleartextLoggingBarrier() {
4239
exists(CallExpr c, AutoClosureExpr e |
4340
c.getStaticTarget().getName().matches("appendInterpolation(_:%privacy:%)") and
4441
c.getArgument(0).getExpr() = e and

‎swift/ql/lib/codeql/swift/security/CleartextLoggingQuery.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@ module CleartextLoggingConfig implements DataFlow::ConfigSig {
1717

1818
predicate isSink(DataFlow::Node sink) { sink instanceof CleartextLoggingSink }
1919

20-
predicate isBarrier(DataFlow::Node sanitizer) { sanitizer instanceof CleartextLoggingSanitizer }
20+
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof CleartextLoggingBarrier }
2121

2222
// Disregard paths that contain other paths. This helps with performance.
2323
predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
2424

2525
predicate isAdditionalFlowStep(DataFlow::Node n1, DataFlow::Node n2) {
26-
any(CleartextLoggingAdditionalTaintStep s).step(n1, n2)
26+
any(CleartextLoggingAdditionalFlowStep s).step(n1, n2)
2727
}
2828
}
2929

‎swift/ql/lib/codeql/swift/security/CleartextStorageDatabaseExtensions.qll

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -15,16 +15,16 @@ import codeql.swift.dataflow.ExternalFlow
1515
abstract class CleartextStorageDatabaseSink extends DataFlow::Node { }
1616

1717
/**
18-
* A sanitizer for cleartext database storage vulnerabilities.
18+
* A barrier for cleartext database storage vulnerabilities.
1919
*/
20-
abstract class CleartextStorageDatabaseSanitizer extends DataFlow::Node { }
20+
abstract class CleartextStorageDatabaseBarrier extends DataFlow::Node { }
2121

2222
/**
23-
* A unit class for adding additional taint steps.
23+
* A unit class for adding additional flow steps.
2424
*/
25-
class CleartextStorageDatabaseAdditionalTaintStep extends Unit {
25+
class CleartextStorageDatabaseAdditionalFlowStep extends Unit {
2626
/**
27-
* Holds if the step from `node1` to `node2` should be considered a taint
27+
* Holds if the step from `node1` to `node2` should be considered a flow
2828
* step for paths related to cleartext database storage vulnerabilities.
2929
*/
3030
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
@@ -114,16 +114,16 @@ private class CleartextStorageDatabaseSinks extends SinkModelCsv {
114114
}
115115

116116
/**
117-
* An encryption sanitizer for cleartext database storage vulnerabilities.
117+
* An encryption barrier for cleartext database storage vulnerabilities.
118118
*/
119-
private class CleartextStorageDatabaseEncryptionSanitizer extends CleartextStorageDatabaseSanitizer {
120-
CleartextStorageDatabaseEncryptionSanitizer() { this.asExpr() instanceof EncryptedExpr }
119+
private class CleartextStorageDatabaseEncryptionBarrier extends CleartextStorageDatabaseBarrier {
120+
CleartextStorageDatabaseEncryptionBarrier() { this.asExpr() instanceof EncryptedExpr }
121121
}
122122

123123
/**
124124
* An additional taint step for cleartext database storage vulnerabilities.
125125
*/
126-
private class CleartextStorageDatabaseArrayAdditionalTaintStep extends CleartextStorageDatabaseAdditionalTaintStep
126+
private class CleartextStorageDatabaseArrayAdditionalFlowStep extends CleartextStorageDatabaseAdditionalFlowStep
127127
{
128128
override predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
129129
// needed until we have proper content flow through arrays.

‎swift/ql/lib/codeql/swift/security/CleartextStorageDatabaseQuery.qll

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,10 @@ module CleartextStorageDatabaseConfig implements DataFlow::ConfigSig {
1818

1919
predicate isSink(DataFlow::Node node) { node instanceof CleartextStorageDatabaseSink }
2020

21-
predicate isBarrier(DataFlow::Node sanitizer) {
22-
sanitizer instanceof CleartextStorageDatabaseSanitizer
23-
}
21+
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof CleartextStorageDatabaseBarrier }
2422

2523
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
26-
any(CleartextStorageDatabaseAdditionalTaintStep s).step(nodeFrom, nodeTo)
24+
any(CleartextStorageDatabaseAdditionalFlowStep s).step(nodeFrom, nodeTo)
2725
}
2826

2927
predicate isBarrierIn(DataFlow::Node node) {

‎swift/ql/lib/codeql/swift/security/CleartextStoragePreferencesExtensions.qll

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -18,16 +18,16 @@ abstract class CleartextStoragePreferencesSink extends DataFlow::Node {
1818
}
1919

2020
/**
21-
* A sanitizer for cleartext preferences storage vulnerabilities.
21+
* A barrier for cleartext preferences storage vulnerabilities.
2222
*/
23-
abstract class CleartextStoragePreferencesSanitizer extends DataFlow::Node { }
23+
abstract class CleartextStoragePreferencesBarrier extends DataFlow::Node { }
2424

2525
/**
26-
* A unit class for adding additional taint steps.
26+
* A unit class for adding additional flow steps.
2727
*/
28-
class CleartextStoragePreferencesAdditionalTaintStep extends Unit {
28+
class CleartextStoragePreferencesAdditionalFlowStep extends Unit {
2929
/**
30-
* Holds if the step from `node1` to `node2` should be considered a taint
30+
* Holds if the step from `node1` to `node2` should be considered a flow
3131
* step for paths related to cleartext preferences storage vulnerabilities.
3232
*/
3333
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
@@ -72,11 +72,11 @@ private class NSUserDefaultsControllerStore extends CleartextStoragePreferencesS
7272
}
7373

7474
/**
75-
* An encryption sanitizer for cleartext preferences storage vulnerabilities.
75+
* An encryption barrier for cleartext preferences storage vulnerabilities.
7676
*/
77-
private class CleartextStoragePreferencesEncryptionSanitizer extends CleartextStoragePreferencesSanitizer
77+
private class CleartextStoragePreferencesEncryptionBarrier extends CleartextStoragePreferencesBarrier
7878
{
79-
CleartextStoragePreferencesEncryptionSanitizer() { this.asExpr() instanceof EncryptedExpr }
79+
CleartextStoragePreferencesEncryptionBarrier() { this.asExpr() instanceof EncryptedExpr }
8080
}
8181

8282
/**

‎swift/ql/lib/codeql/swift/security/CleartextStoragePreferencesQuery.qll

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ module CleartextStoragePreferencesConfig implements DataFlow::ConfigSig {
1818

1919
predicate isSink(DataFlow::Node node) { node instanceof CleartextStoragePreferencesSink }
2020

21-
predicate isBarrier(DataFlow::Node sanitizer) {
22-
sanitizer instanceof CleartextStoragePreferencesSanitizer
21+
predicate isBarrier(DataFlow::Node barrier) {
22+
barrier instanceof CleartextStoragePreferencesBarrier
2323
}
2424

2525
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
26-
any(CleartextStoragePreferencesAdditionalTaintStep s).step(nodeFrom, nodeTo)
26+
any(CleartextStoragePreferencesAdditionalFlowStep s).step(nodeFrom, nodeTo)
2727
}
2828

2929
predicate isBarrierIn(DataFlow::Node node) {

‎swift/ql/lib/codeql/swift/security/CleartextTransmissionExtensions.qll

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,16 +15,16 @@ import codeql.swift.dataflow.ExternalFlow
1515
abstract class CleartextTransmissionSink extends DataFlow::Node { }
1616

1717
/**
18-
* A sanitizer for cleartext transmission vulnerabilities.
18+
* A barrier for cleartext transmission vulnerabilities.
1919
*/
20-
abstract class CleartextTransmissionSanitizer extends DataFlow::Node { }
20+
abstract class CleartextTransmissionBarrier extends DataFlow::Node { }
2121

2222
/**
23-
* A unit class for adding additional taint steps.
23+
* A unit class for adding additional flow steps.
2424
*/
25-
class CleartextTransmissionAdditionalTaintStep extends Unit {
25+
class CleartextTransmissionAdditionalFlowStep extends Unit {
2626
/**
27-
* Holds if the step from `node1` to `node2` should be considered a taint
27+
* Holds if the step from `node1` to `node2` should be considered a flow
2828
* step for paths related to cleartext transmission vulnerabilities.
2929
*/
3030
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);
@@ -81,10 +81,10 @@ private class AlamofireTransmittedSink extends CleartextTransmissionSink {
8181
}
8282

8383
/**
84-
* An encryption sanitizer for cleartext transmission vulnerabilities.
84+
* An encryption barrier for cleartext transmission vulnerabilities.
8585
*/
86-
private class CleartextTransmissionEncryptionSanitizer extends CleartextTransmissionSanitizer {
87-
CleartextTransmissionEncryptionSanitizer() { this.asExpr() instanceof EncryptedExpr }
86+
private class CleartextTransmissionEncryptionBarrier extends CleartextTransmissionBarrier {
87+
CleartextTransmissionEncryptionBarrier() { this.asExpr() instanceof EncryptedExpr }
8888
}
8989

9090
/**

‎swift/ql/lib/codeql/swift/security/CleartextTransmissionQuery.qll

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,10 @@ module CleartextTransmissionConfig implements DataFlow::ConfigSig {
1818

1919
predicate isSink(DataFlow::Node node) { node instanceof CleartextTransmissionSink }
2020

21-
predicate isBarrier(DataFlow::Node sanitizer) {
22-
sanitizer instanceof CleartextTransmissionSanitizer
23-
}
21+
predicate isBarrier(DataFlow::Node barrier) { barrier instanceof CleartextTransmissionBarrier }
2422

2523
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
26-
any(CleartextTransmissionAdditionalTaintStep s).step(nodeFrom, nodeTo)
24+
any(CleartextTransmissionAdditionalFlowStep s).step(nodeFrom, nodeTo)
2725
}
2826

2927
predicate isBarrierIn(DataFlow::Node node) {

‎swift/ql/lib/codeql/swift/security/ConstantPasswordExtensions.qll

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,16 @@ import codeql.swift.dataflow.ExternalFlow
1414
abstract class ConstantPasswordSink extends DataFlow::Node { }
1515

1616
/**
17-
* A sanitizer for constant password vulnerabilities.
17+
* A barrier for constant password vulnerabilities.
1818
*/
19-
abstract class ConstantPasswordSanitizer extends DataFlow::Node { }
19+
abstract class ConstantPasswordBarrier extends DataFlow::Node { }
2020

2121
/**
22-
* A unit class for adding additional taint steps.
22+
* A unit class for adding additional flow steps.
2323
*/
24-
class ConstantPasswordAdditionalTaintStep extends Unit {
24+
class ConstantPasswordAdditionalFlowStep extends Unit {
2525
/**
26-
* Holds if the step from `node1` to `node2` should be considered a taint
26+
* Holds if the step from `node1` to `node2` should be considered a flow
2727
* step for paths related to constant password vulnerabilities.
2828
*/
2929
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

‎swift/ql/lib/codeql/swift/security/ConstantPasswordQuery.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,10 @@ module ConstantPasswordConfig implements DataFlow::ConfigSig {
2828

2929
predicate isSink(DataFlow::Node node) { node instanceof ConstantPasswordSink }
3030

31-
predicate isBarrier(DataFlow::Node node) { node instanceof ConstantPasswordSanitizer }
31+
predicate isBarrier(DataFlow::Node node) { node instanceof ConstantPasswordBarrier }
3232

3333
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
34-
any(ConstantPasswordAdditionalTaintStep s).step(nodeFrom, nodeTo)
34+
any(ConstantPasswordAdditionalFlowStep s).step(nodeFrom, nodeTo)
3535
}
3636
}
3737

‎swift/ql/lib/codeql/swift/security/ConstantSaltExtensions.qll

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,16 @@ import codeql.swift.dataflow.ExternalFlow
1414
abstract class ConstantSaltSink extends DataFlow::Node { }
1515

1616
/**
17-
* A sanitizer for constant salt vulnerabilities.
17+
* A barrier for constant salt vulnerabilities.
1818
*/
19-
abstract class ConstantSaltSanitizer extends DataFlow::Node { }
19+
abstract class ConstantSaltBarrier extends DataFlow::Node { }
2020

2121
/**
22-
* A unit class for adding additional taint steps.
22+
* A unit class for adding additional flow steps.
2323
*/
24-
class ConstantSaltAdditionalTaintStep extends Unit {
24+
class ConstantSaltAdditionalFlowStep extends Unit {
2525
/**
26-
* Holds if the step from `node1` to `node2` should be considered a taint
26+
* Holds if the step from `node1` to `node2` should be considered a flow
2727
* step for paths related to constant salt vulnerabilities.
2828
*/
2929
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

‎swift/ql/lib/codeql/swift/security/ConstantSaltQuery.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,10 +29,10 @@ module ConstantSaltConfig implements DataFlow::ConfigSig {
2929

3030
predicate isSink(DataFlow::Node node) { node instanceof ConstantSaltSink }
3131

32-
predicate isBarrier(DataFlow::Node node) { node instanceof ConstantSaltSanitizer }
32+
predicate isBarrier(DataFlow::Node node) { node instanceof ConstantSaltBarrier }
3333

3434
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
35-
any(ConstantSaltAdditionalTaintStep s).step(nodeFrom, nodeTo)
35+
any(ConstantSaltAdditionalFlowStep s).step(nodeFrom, nodeTo)
3636
}
3737
}
3838

‎swift/ql/lib/codeql/swift/security/ECBEncryptionExtensions.qll

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,16 +22,16 @@ abstract class EcbEncryptionSource extends DataFlow::Node { }
2222
abstract class EcbEncryptionSink extends DataFlow::Node { }
2323

2424
/**
25-
* A sanitizer for ECB encryption vulnerabilities.
25+
* A barrier for ECB encryption vulnerabilities.
2626
*/
27-
abstract class EcbEncryptionSanitizer extends DataFlow::Node { }
27+
abstract class EcbEncryptionBarrier extends DataFlow::Node { }
2828

2929
/**
30-
* A unit class for adding additional taint steps.
30+
* A unit class for adding additional flow steps.
3131
*/
32-
class EcbEncryptionAdditionalTaintStep extends Unit {
32+
class EcbEncryptionAdditionalFlowStep extends Unit {
3333
/**
34-
* Holds if the step from `node1` to `node2` should be considered a taint
34+
* Holds if the step from `node1` to `node2` should be considered a flow
3535
* step for paths related to ECB encryption vulnerabilities.
3636
*/
3737
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

‎swift/ql/lib/codeql/swift/security/ECBEncryptionQuery.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,10 @@ module EcbEncryptionConfig implements DataFlow::ConfigSig {
1717

1818
predicate isSink(DataFlow::Node node) { node instanceof EcbEncryptionSink }
1919

20-
predicate isBarrier(DataFlow::Node node) { node instanceof EcbEncryptionSanitizer }
20+
predicate isBarrier(DataFlow::Node node) { node instanceof EcbEncryptionBarrier }
2121

2222
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
23-
any(EcbEncryptionAdditionalTaintStep s).step(nodeFrom, nodeTo)
23+
any(EcbEncryptionAdditionalFlowStep s).step(nodeFrom, nodeTo)
2424
}
2525
}
2626

‎swift/ql/lib/codeql/swift/security/HardcodedEncryptionKeyExtensions.qll

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,16 +14,16 @@ import codeql.swift.dataflow.ExternalFlow
1414
abstract class HardcodedEncryptionKeySink extends DataFlow::Node { }
1515

1616
/**
17-
* A sanitizer for hard-coded encryption key vulnerabilities.
17+
* A barrier for hard-coded encryption key vulnerabilities.
1818
*/
19-
abstract class HardcodedEncryptionKeySanitizer extends DataFlow::Node { }
19+
abstract class HardcodedEncryptionKeyBarrier extends DataFlow::Node { }
2020

2121
/**
22-
* A unit class for adding additional taint steps.
22+
* A unit class for adding additional flow steps.
2323
*/
24-
class HardcodedEncryptionKeyAdditionalTaintStep extends Unit {
24+
class HardcodedEncryptionKeyAdditionalFlowStep extends Unit {
2525
/**
26-
* Holds if the step from `node1` to `node2` should be considered a taint
26+
* Holds if the step from `node1` to `node2` should be considered a flow
2727
* step for paths related to hard-coded encryption key vulnerabilities.
2828
*/
2929
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

‎swift/ql/lib/codeql/swift/security/HardcodedEncryptionKeyQuery.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,10 +34,10 @@ module HardcodedKeyConfig implements DataFlow::ConfigSig {
3434

3535
predicate isSink(DataFlow::Node node) { node instanceof HardcodedEncryptionKeySink }
3636

37-
predicate isBarrier(DataFlow::Node node) { node instanceof HardcodedEncryptionKeySanitizer }
37+
predicate isBarrier(DataFlow::Node node) { node instanceof HardcodedEncryptionKeyBarrier }
3838

3939
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
40-
any(HardcodedEncryptionKeyAdditionalTaintStep s).step(nodeFrom, nodeTo)
40+
any(HardcodedEncryptionKeyAdditionalFlowStep s).step(nodeFrom, nodeTo)
4141
}
4242
}
4343

‎swift/ql/lib/codeql/swift/security/InsecureTLSExtensions.qll

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,16 +20,16 @@ abstract class InsecureTlsExtensionsSource extends DataFlow::Node { }
2020
abstract class InsecureTlsExtensionsSink extends DataFlow::Node { }
2121

2222
/**
23-
* A sanitizer for insecure TLS configuration vulnerabilities.
23+
* A barrier for insecure TLS configuration vulnerabilities.
2424
*/
25-
abstract class InsecureTlsExtensionsSanitizer extends DataFlow::Node { }
25+
abstract class InsecureTlsExtensionsBarrier extends DataFlow::Node { }
2626

2727
/**
28-
* A unit class for adding additional taint steps.
28+
* A unit class for adding additional flow steps.
2929
*/
30-
class InsecureTlsExtensionsAdditionalTaintStep extends Unit {
30+
class InsecureTlsExtensionsAdditionalFlowStep extends Unit {
3131
/**
32-
* Holds if the step from `node1` to `node2` should be considered a taint
32+
* Holds if the step from `node1` to `node2` should be considered a flow
3333
* step for paths related to insecure TLS configuration vulnerabilities.
3434
*/
3535
abstract predicate step(DataFlow::Node nodeFrom, DataFlow::Node nodeTo);

‎swift/ql/lib/codeql/swift/security/InsecureTLSQuery.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,10 +16,10 @@ module InsecureTlsConfig implements DataFlow::ConfigSig {
1616

1717
predicate isSink(DataFlow::Node node) { node instanceof InsecureTlsExtensionsSink }
1818

19-
predicate isBarrier(DataFlow::Node node) { node instanceof InsecureTlsExtensionsSanitizer }
19+
predicate isBarrier(DataFlow::Node node) { node instanceof InsecureTlsExtensionsBarrier }
2020

2121
predicate isAdditionalFlowStep(DataFlow::Node nodeFrom, DataFlow::Node nodeTo) {
22-
any(InsecureTlsExtensionsAdditionalTaintStep s).step(nodeFrom, nodeTo)
22+
any(InsecureTlsExtensionsAdditionalFlowStep s).step(nodeFrom, nodeTo)
2323
}
2424
}
2525

0 commit comments

Comments
 (0)