CodeQL library for C#
codeql/csharp-all 0.8.12 (changelog, source)
Search

Module Remote

Provides classes representing data flow sources for remote user input.

Import path

import semmle.code.csharp.security.dataflow.flowsources.Remote

Imports

csharp

The default C# QL library.

Classes

ActionMethodParameter

A parameter to an Mvc controller action method, viewed as a source of remote user input.

AspNetCoreActionMethodParameter

A parameter to a Mvc controller action method, viewed as a source of remote user input.

AspNetCoreQueryRemoteFlowSource

A data flow source of remote user input (ASP.NET query collection).

AspNetCoreRemoteFlowSource

A data flow source of remote user input (ASP.NET Core).

AspNetCoreRoutingMethodParameter

A parameter to a routing method delegate.

AspNetQueryStringMember

A member containing an ASP.NET query string.

AspNetQueryStringRemoteFlowSource

A data flow source of remote user input (ASP.NET query string).

AspNetRemoteFlowSource

A data flow source of remote user input (ASP.NET).

AspNetServiceRemoteFlowSource

A data flow source of remote user input (ASP.NET web service).

AspNetUnvalidatedQueryStringRemoteFlowSource

A data flow source of remote user input (ASP.NET unvalidated request data).

AspNetUserInputRemoteFlowSource

A data flow source of remote user input (ASP.NET user input).

MicrosoftOwinRequestRemoteFlowSource

A data flow source of remote user input (Microsoft Owin IOwinRequest).

MicrosoftOwinStringFlowSource

A data flow source of remote user input (Microsoft Owin, a query, request, or path string).

RemoteFlowSource

A data flow source of remote user input.

SystemNetHttpRequestMessageRemoteFlowSource

A data flow source of remote user input (ASP.NET request message).

WcfRemoteFlowSource

A data flow source of remote user input (WCF based web service).