C#: Allow encryption- prefix for sinks in CsvValidation.

michaelnebel · michaelnebel · commit 6603024488f2 · 2022-07-18T14:32:31.000+02:00
diff --git a/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll b/csharp/ql/lib/semmle/code/csharp/dataflow/ExternalFlow.qll
@@ -377,6 +377,7 @@ module CsvValidation {
     exists(string row, string kind | sinkModel(row) |
       kind = row.splitAt(";", 7) and
       not kind = ["code", "sql", "xss", "remote", "html"] and
+      not kind.matches("encryption-%") and
       msg = "Invalid kind \"" + kind + "\" in sink model."
     )
     or

Original file line number	Diff line number	Diff line change
`@@ -377,6 +377,7 @@ module CsvValidation {`
`377`	`377`	`exists(string row, string kind \| sinkModel(row) \|`
`378`	`378`	`kind = row.splitAt(";", 7) and`
`379`	`379`	`not kind = ["code", "sql", "xss", "remote", "html"] and`
	`380`	`+ not kind.matches("encryption-%") and`
`380`	`381`	`msg = "Invalid kind \"" + kind + "\" in sink model."`
`381`	`382`	`)`
`382`	`383`	`or`