Skip to content

Commit c812d4e

Browse files
committed
C#: Add Query suffix to libraries that should only be imported by queries
1 parent 1d56748 commit c812d4e

File tree

65 files changed

+473
-468
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

65 files changed

+473
-468
lines changed

csharp/ql/src/Security Features/CWE-020/ExternalAPIsUsedWithUntrustedData.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
*/
1010

1111
import csharp
12-
import semmle.code.csharp.security.dataflow.ExternalAPIs
12+
import semmle.code.csharp.security.dataflow.ExternalAPIsQuery
1313

1414
from ExternalAPIUsedWithUntrustedData externalAPI
1515
select externalAPI, count(externalAPI.getUntrustedDataNode()) as numberOfUses,

csharp/ql/src/Security Features/CWE-020/UntrustedDataToExternalAPI.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111

1212
import csharp
1313
import semmle.code.csharp.dataflow.TaintTracking
14-
import semmle.code.csharp.security.dataflow.ExternalAPIs
14+
import semmle.code.csharp.security.dataflow.ExternalAPIsQuery
1515
import DataFlow::PathGraph
1616

1717
from UntrustedDataToExternalAPIConfig config, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-022/TaintedPath.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
*/
1616

1717
import csharp
18-
import semmle.code.csharp.security.dataflow.TaintedPath::TaintedPath
18+
import semmle.code.csharp.security.dataflow.TaintedPathQuery::TaintedPath
1919
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
2020

2121
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-022/ZipSlip.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import csharp
16-
import semmle.code.csharp.security.dataflow.ZipSlip::ZipSlip
16+
import semmle.code.csharp.security.dataflow.ZipSlipQuery::ZipSlip
1717
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1818

1919
from TaintTrackingConfiguration zipTaintTracking, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-078/CommandInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.dataflow.CommandInjection::CommandInjection
17+
import semmle.code.csharp.security.dataflow.CommandInjectionQuery::CommandInjection
1818
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1919

2020
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-078/StoredCommandInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515

1616
import csharp
1717
import semmle.code.csharp.security.dataflow.flowsources.Stored
18-
import semmle.code.csharp.security.dataflow.CommandInjection::CommandInjection
18+
import semmle.code.csharp.security.dataflow.CommandInjectionQuery::CommandInjection
1919
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
2020

2121
class StoredTaintTrackingConfiguration extends TaintTrackingConfiguration {

csharp/ql/src/Security Features/CWE-079/StoredXSS.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414

1515
import csharp
1616
import semmle.code.csharp.security.dataflow.flowsources.Stored
17-
import semmle.code.csharp.security.dataflow.XSS::XSS
17+
import semmle.code.csharp.security.dataflow.XSSQuery::XSS
1818
import semmle.code.csharp.dataflow.DataFlow2
1919
import DataFlow2::PathGraph
2020

csharp/ql/src/Security Features/CWE-079/XSS.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import csharp
16-
import semmle.code.csharp.security.dataflow.XSS::XSS
16+
import semmle.code.csharp.security.dataflow.XSSQuery::XSS
1717
import PathGraph
1818

1919
from XssNode source, XssNode sink, string message

csharp/ql/src/Security Features/CWE-089/SecondOrderSqlInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.SqlInjection
15+
import semmle.code.csharp.security.dataflow.SqlInjectionQuery
1616
import semmle.code.csharp.security.dataflow.flowsources.Stored
1717
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1818

csharp/ql/src/Security Features/CWE-089/SqlInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.SqlInjection::SqlInjection
15+
import semmle.code.csharp.security.dataflow.SqlInjectionQuery::SqlInjection
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
string getSourceType(DataFlow::Node node) {

csharp/ql/src/Security Features/CWE-090/LDAPInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.LDAPInjection::LDAPInjection
15+
import semmle.code.csharp.security.dataflow.LDAPInjectionQuery::LDAPInjection
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-090/StoredLDAPInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.LDAPInjection::LDAPInjection
15+
import semmle.code.csharp.security.dataflow.LDAPInjectionQuery::LDAPInjection
1616
import semmle.code.csharp.security.dataflow.flowsources.Stored
1717
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1818

csharp/ql/src/Security Features/CWE-094/CodeInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.dataflow.CodeInjection::CodeInjection
17+
import semmle.code.csharp.security.dataflow.CodeInjectionQuery::CodeInjection
1818
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1919

2020
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-099/ResourceInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.ResourceInjection::ResourceInjection
15+
import semmle.code.csharp.security.dataflow.ResourceInjectionQuery::ResourceInjection
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-112/MissingXMLValidation.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.MissingXMLValidation::MissingXMLValidation
15+
import semmle.code.csharp.security.dataflow.MissingXMLValidationQuery::MissingXMLValidation
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-117/LogForging.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.LogForging::LogForging
15+
import semmle.code.csharp.security.dataflow.LogForgingQuery::LogForging
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-312/CleartextStorage.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.dataflow.CleartextStorage::CleartextStorage
17+
import semmle.code.csharp.security.dataflow.CleartextStorageQuery::CleartextStorage
1818
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1919

2020
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-321/HardcodedEncryptionKey.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.cryptography.EncryptionKeyDataFlow::EncryptionKeyDataFlow
17+
import semmle.code.csharp.security.cryptography.EncryptionKeyDataFlowQuery::EncryptionKeyDataFlow
1818

1919
/**
2020
* The creation of a literal byte array.

csharp/ql/src/Security Features/CWE-359/ExposureOfPrivateInformation.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.ExposureOfPrivateInformation::ExposureOfPrivateInformation
15+
import semmle.code.csharp.security.dataflow.ExposureOfPrivateInformationQuery::ExposureOfPrivateInformation
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-502/UnsafeDeserialization.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.UnsafeDeserialization::UnsafeDeserialization
15+
import semmle.code.csharp.security.dataflow.UnsafeDeserializationQuery::UnsafeDeserialization
1616

1717
from Call deserializeCall, Sink sink
1818
where deserializeCall.getAnArgument() = sink.asExpr()

csharp/ql/src/Security Features/CWE-502/UnsafeDeserializationUntrustedInput.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.UnsafeDeserialization::UnsafeDeserialization
15+
import semmle.code.csharp.security.dataflow.UnsafeDeserializationQuery::UnsafeDeserialization
1616
import DataFlow::PathGraph
1717

1818
from TaintTrackingConfig config, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-601/UrlRedirect.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.UrlRedirect::UrlRedirect
15+
import semmle.code.csharp.security.dataflow.UrlRedirectQuery::UrlRedirect
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-611/UntrustedDataInsecureXml.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import csharp
16-
import semmle.code.csharp.security.dataflow.XMLEntityInjection::XMLEntityInjection
16+
import semmle.code.csharp.security.dataflow.XMLEntityInjectionQuery::XMLEntityInjection
1717
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1818

1919
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-611/UseXmlSecureResolver.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.xml.InsecureXML::InsecureXML
17+
import semmle.code.csharp.security.xml.InsecureXMLQuery::InsecureXML
1818

1919
from InsecureXmlProcessing xmlProcessing, string reason
2020
where xmlProcessing.isUnsafe(reason)

csharp/ql/src/Security Features/CWE-643/StoredXPathInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313

1414
import csharp
1515
import semmle.code.csharp.security.dataflow.flowsources.Stored
16-
import semmle.code.csharp.security.dataflow.XPathInjection
16+
import semmle.code.csharp.security.dataflow.XPathInjectionQuery
1717
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1818

1919
class StoredTaintTrackingConfiguration extends XPathInjection::TaintTrackingConfiguration {

csharp/ql/src/Security Features/CWE-643/XPathInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
*/
1313

1414
import csharp
15-
import semmle.code.csharp.security.dataflow.XPathInjection::XPathInjection
15+
import semmle.code.csharp.security.dataflow.XPathInjectionQuery::XPathInjection
1616
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1717

1818
from TaintTrackingConfiguration c, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-730/ReDoS.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import csharp
16-
import semmle.code.csharp.security.dataflow.ReDoS::ReDoS
16+
import semmle.code.csharp.security.dataflow.ReDoSQuery::ReDoS
1717
import semmle.code.csharp.frameworks.system.text.RegularExpressions
1818
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1919

csharp/ql/src/Security Features/CWE-730/RegexInjection.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.dataflow.RegexInjection::RegexInjection
17+
import semmle.code.csharp.security.dataflow.RegexInjectionQuery::RegexInjection
1818
import semmle.code.csharp.frameworks.system.text.RegularExpressions
1919
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
2020

csharp/ql/src/Security Features/CWE-798/HardcodedConnectionString.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414

1515
import csharp
1616
import semmle.code.csharp.frameworks.system.Data
17-
import semmle.code.csharp.security.dataflow.HardcodedCredentials
17+
import semmle.code.csharp.security.dataflow.HardcodedCredentialsQuery
1818
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1919

2020
/**

csharp/ql/src/Security Features/CWE-798/HardcodedCredentials.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
*/
1414

1515
import csharp
16-
import semmle.code.csharp.security.dataflow.HardcodedCredentials::HardcodedCredentials
16+
import semmle.code.csharp.security.dataflow.HardcodedCredentialsQuery::HardcodedCredentials
1717
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1818

1919
from

csharp/ql/src/Security Features/CWE-807/ConditionalBypass.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@
1414
*/
1515

1616
import csharp
17-
import semmle.code.csharp.security.dataflow.ConditionalBypass::UserControlledBypassOfSensitiveMethod
17+
import semmle.code.csharp.security.dataflow.ConditionalBypassQuery::UserControlledBypassOfSensitiveMethod
1818
import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
1919

2020
from Configuration config, DataFlow::PathNode source, DataFlow::PathNode sink

csharp/ql/src/Security Features/CWE-838/InappropriateEncoding.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,9 +16,9 @@ import semmle.code.csharp.frameworks.System
1616
import semmle.code.csharp.frameworks.system.Net
1717
import semmle.code.csharp.frameworks.system.Web
1818
import semmle.code.csharp.frameworks.system.web.UI
19-
import semmle.code.csharp.security.dataflow.SqlInjection
19+
import semmle.code.csharp.security.dataflow.SqlInjectionQuery
2020
import semmle.code.csharp.security.dataflow.flowsinks.Html
21-
import semmle.code.csharp.security.dataflow.UrlRedirect
21+
import semmle.code.csharp.security.dataflow.UrlRedirectQuery
2222
import semmle.code.csharp.security.Sanitizers
2323
import semmle.code.csharp.dataflow.DataFlow2::DataFlow2
2424
import semmle.code.csharp.dataflow.DataFlow2::DataFlow2::PathGraph

csharp/ql/src/Useless code/DefaultToString.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,4 @@
1010
* maintainability
1111
*/
1212

13-
import DefaultToString
13+
import DefaultToStringQuery

csharp/ql/src/semmle/code/csharp/dataflow/ExternalFlow.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ private module Frameworks {
8787
private import semmle.code.csharp.security.dataflow.flowsources.Local
8888
private import semmle.code.csharp.security.dataflow.flowsinks.Html
8989
private import semmle.code.csharp.frameworks.System
90-
private import semmle.code.csharp.security.dataflow.XSS
90+
private import semmle.code.csharp.security.dataflow.XSSSinks
9191
}
9292

9393
/**

csharp/ql/src/semmle/code/csharp/security/dataflow/XMLEntityInjection.qll renamed to csharp/ql/src/semmle/code/csharp/security/dataflow/XMLEntityInjectionQuery.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ module XMLEntityInjection {
88
import semmle.code.csharp.security.dataflow.flowsources.Remote
99
import semmle.code.csharp.frameworks.System
1010
import semmle.code.csharp.frameworks.system.text.RegularExpressions
11-
import semmle.code.csharp.security.xml.InsecureXML
11+
import semmle.code.csharp.security.xml.InsecureXMLQuery
1212
import semmle.code.csharp.security.Sanitizers
1313

1414
/**

0 commit comments

Comments
 (0)