sencho/.github/codeql/extensions/safeLog.model.yml at docs/tutorials-batch-1 - sencho - Grace Solutions

gsadmin/sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-07-26 11:49:16 +00:00

Files

T

Anso 0dcf309c48 fix: add CodeQL barrier model for sanitizeForLog against log injection (#935 )

sanitizeForLog() already strips CR, LF, and control characters from user
input before logging, but CodeQL did not recognize the custom sanitizer.
This caused false-positive log-injection alerts at every call site.

Add a CodeQL data extension model that marks the return value of
sanitizeForLog() as a barrier against log-injection taint, and a
codeql-config.yml that references it.

2026-05-06 08:47:34 -04:00

7 lines

192 B

YAML

Raw Permalink Blame History

 extensions:
   - addsTo:
       pack: codeql/javascript-all
       extensible: barrierModel
     data:
       - ["backend/src/utils/safeLog", "Member[sanitizeForLog].ReturnValue", "log-injection"]