CodeQL library for C#
codeql/csharp-all 0.9.0 (changelog, source)
Search

Predicate XmlSettings::insecureResolverSettings

Holds if the given object creation constructs XmlReaderSettings with an insecure resolver.

Import path

import semmle.code.csharp.security.xml.InsecureXMLQuery
predicate insecureResolverSettings(ObjectCreation creation, Expr evidence, string reason)