For other CodeQL resources, including tutorials and examples, see the CodeQL documentation

ResourceInjectionQuery

Module ResourceInjectionQuery

Provides a taint-tracking configuration for reasoning about untrusted user input used in resource descriptors.


                                import semmle.code.csharp.security.dataflow.ResourceInjectionQuery

The default C# QL library.

LocalSource	A source of local user input.
RemoteSource	A source of remote user input.
Sanitizer	A sanitizer for untrusted user input used in resource descriptors.
Sink	A data flow sink for untrusted user input used in resource descriptors.
Source	A data flow source for untrusted user input used in resource descriptors.
SqlConnectionStringSink	An argument to the `ConnectionString` property on a data connection class.
TaintTrackingConfiguration	DEPRECATED: Use `ResourceInjection` instead.

A taint-tracking module for untrusted user input used in resource descriptors.