Module UrlRedirectQuery
Provides a taint-tracking configuration for reasoning about unvalidated URL redirect problems.
Import path
import semmle.code.csharp.security.dataflow.UrlRedirectQuery
Imports
csharp | The default C# QL library. |
Classes
AspNetCoreLocationHeaderSink | Anything that is setting “location” header in the response headers. |
AspNetCoreRedirectSink | A URL argument to a call to |
ConcatenationSanitizer | A string concatenation expression, where the left hand side contains the character “?”. |
HttpServerTransferSink | A path argument to a call to |
LocalUrlSanitizer | A URL argument to a call to |
LocationHeaderSink | A value argument to a call to |
RawUrlSanitizer | A call to the getter of the RawUrl property, whose value is considered to be safe for URL redirects. |
RedirectSink | A URL argument to a call to |
RemoteSource | A source of remote user input. |
Sanitizer | A sanitizer for unvalidated URL redirect vulnerabilities. |
SanitizerGuard | DEPRECATED: Use |
Sink | A data flow sink for unvalidated URL redirect vulnerabilities. |
Source | A data flow source for unvalidated URL redirect vulnerabilities. |
TaintTrackingConfiguration | A taint-tracking configuration for reasoning about unvalidated URL redirect vulnerabilities. |
UrlEncodeSanitizer | A call to an URL encoder. |