Module LDAPInjectionQuery

Provides a taint-tracking configuration for reasoning about unvalidated user input that is used to construct LDAP queries.

Import path

import semmle.code.csharp.security.dataflow.LDAPInjectionQuery

The default C# QL library.

DirectoryEntryPathSink	An argument that sets the `Path` property of a `DirectoryEntry` object that is a sink for LDAP injection.
DirectorySearcherFilterSink	A argument that sets the `Filter` property of a `DirectorySearcher` object that is a sink for LDAP injection.
LdapEncodeSanitizer	A call to a method which is named “LDAP*Encode”, which is likely to be an LDAP sanitizer.
RemoteSource	DEPRECATED: Use `ThreadModelSource` instead.
Sanitizer	A sanitizer for unvalidated user input that is used to construct LDAP queries.
SearchRequestFilterSink	A argument that sets the `Filter` property of a `SearchRequest` object that is a sink for LDAP injection.
Sink	A data flow sink for unvalidated user input that is used to construct LDAP queries.
Source	A data flow source for unvalidated user input that is used to construct LDAP queries.
TaintTrackingConfiguration	DEPRECATED: Use `LdapInjection` instead.
ThreatModelSource	A source supported by the current threat model.

A taint-tracking configuration for unvalidated user input that is used to construct LDAP queries.

A taint-tracking configuration for unvalidated user input that is used to construct LDAP queries.