[DIFF-INFORMED] C#: HardcodedConnectionString

d10c · d10c · commit 40aac5ef592e · 2025-07-17T11:43:56.000+02:00
diff --git a/csharp/ql/src/Security Features/CWE-798/HardcodedConnectionString.ql b/csharp/ql/src/Security Features/CWE-798/HardcodedConnectionString.ql
@@ -38,6 +38,12 @@ module ConnectionStringConfig implements DataFlow::ConfigSig {
   }
 
   predicate isBarrier(DataFlow::Node node) { node instanceof StringFormatSanitizer }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSinkLocation(DataFlow::Node sink) {
+    any(Call call | call.getAnArgument() = sink.asExpr()).getLocation() = result
+  }
 }
 
 /**

Original file line number	Diff line number	Diff line change
`@@ -38,6 +38,12 @@ module ConnectionStringConfig implements DataFlow::ConfigSig {`
`38`	`38`	`}`
`39`	`39`
`40`	`40`	`predicate isBarrier(DataFlow::Node node) { node instanceof StringFormatSanitizer }`
	`41`	`+`
	`42`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
	`43`	`+`
	`44`	`+ Location getASelectedSinkLocation(DataFlow::Node sink) {`
	`45`	`+ any(Call call \| call.getAnArgument() = sink.asExpr()).getLocation() = result`
	`46`	`+ }`
`41`	`47`	`}`
`42`	`48`
`43`	`49`	`/**`