[DIFF-INFORMED] C++: CgiXss

d10c · d10c · commit 36d43a4830ef · 2025-08-15T12:00:59.000+02:00
diff --git a/cpp/ql/src/Security/CWE/CWE-079/CgiXss.ql b/cpp/ql/src/Security/CWE/CWE-079/CgiXss.ql
@@ -39,6 +39,12 @@ module Config implements DataFlow::ConfigSig {
     or
     node.asCertainDefinition().getUnspecifiedType() instanceof ArithmeticType
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) {
+    exists(QueryString query | result = query.getLocation() | query = source.asIndirectExpr())
+  }
 }
 
 module Flow = TaintTracking::Global<Config>;

Original file line number	Diff line number	Diff line change
`@@ -39,6 +39,12 @@ module Config implements DataFlow::ConfigSig {`
`39`	`39`	`or`
`40`	`40`	`node.asCertainDefinition().getUnspecifiedType() instanceof ArithmeticType`
`41`	`41`	`}`
	`42`	`+`
	`43`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`44`	`+`
	`45`	`+ Location getASelectedSourceLocation(DataFlow::Node source) {`
	`46`	`+ exists(QueryString query \| result = query.getLocation() \| query = source.asIndirectExpr())`
	`47`	`+ }`
`42`	`48`	`}`
`43`	`49`
`44`	`50`	`module Flow = TaintTracking::Global<Config>;`