Actions/OutputClobberingQuery

d10c · d10c · commit 7bf34f0a56c0 · 2025-10-08T13:21:04.000+02:00
actions/ql/src/experimental/Security/CWE-074/OutputClobberingHigh.ql uses source as endpoint
diff --git a/actions/ql/lib/codeql/actions/security/OutputClobberingQuery.qll b/actions/ql/lib/codeql/actions/security/OutputClobberingQuery.qll
@@ -216,8 +216,6 @@ private module OutputClobberingConfig implements DataFlow::ConfigSig {
   }
 
   predicate observeDiffInformedIncrementalMode() { any() }
-
-  Location getASelectedSourceLocation(DataFlow::Node sink) { none() }
 }
 
 /** Tracks flow of unsafe user input that is used to construct and evaluate an environment variable. */

Original file line number	Diff line number	Diff line change
`@@ -216,8 +216,6 @@ private module OutputClobberingConfig implements DataFlow::ConfigSig {`
`216`	`216`	`}`
`217`	`217`
`218`	`218`	`predicate observeDiffInformedIncrementalMode() { any() }`
`219`		`-`
`220`		`- Location getASelectedSourceLocation(DataFlow::Node sink) { none() }`
`221`	`219`	`}`
`222`	`220`
`223`	`221`	`/** Tracks flow of unsafe user input that is used to construct and evaluate an environment variable. */`