CodeQL library for C#

codeql/csharp-all 2.0.1-dev (changelog, source)

Module Remote

Provides classes representing data flow sources for remote user input.

Import path

import semmle.code.csharp.security.dataflow.flowsources.Remote

Imports

The default C# QL library.

Classes

ActionMethodParameter	A parameter to an Mvc controller action method, viewed as a source of remote user input.
AspNetCoreActionMethodParameter	A parameter to a `Mvc` controller action method, viewed as a source of remote user input.
AspNetCoreQueryRemoteFlowSource	A data flow source of remote user input (ASP.NET query collection).
AspNetCoreRemoteFlowSource	A data flow source of remote user input (ASP.NET Core).
AspNetCoreRoutingMethodParameter	A parameter to a routing method delegate.
AspNetQueryStringMember	A member containing an ASP.NET query string.
AspNetQueryStringRemoteFlowSource	A data flow source of remote user input (ASP.NET query string).
AspNetRemoteFlowSource	A data flow source of remote user input (ASP.NET).
AspNetServiceRemoteFlowSource	A data flow source of remote user input (ASP.NET web service).
AspNetUnvalidatedQueryStringRemoteFlowSource	A data flow source of remote user input (ASP.NET unvalidated request data).
AspNetUserInputRemoteFlowSource	A data flow source of remote user input (ASP.NET user input).
MicrosoftOwinRequestRemoteFlowSource	A data flow source of remote user input (`Microsoft Owin IOwinRequest`).
MicrosoftOwinStringFlowSource	A data flow source of remote user input (Microsoft Owin, a query, request, or path string).
RemoteFlowSource	A data flow source of remote user input.
SystemNetHttpRequestMessageRemoteFlowSource	A data flow source of remote user input (ASP.NET request message).
WcfRemoteFlowSource	A data flow source of remote user input (WCF based web service).