Skip to content

Commit 9323179

Browse files
committed
Document that MaD barriers for hardcoded credentials apply to all kinds
1 parent 5762191 commit 9323179

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

rust/ql/lib/codeql/rust/security/HardcodedCryptographicValueExtensions.qll

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -133,6 +133,9 @@ module HardcodedCryptographicValue {
133133

134134
/**
135135
* An externally modeled barrier for hard-coded cryptographic value vulnerabilities.
136+
*
137+
* Note that a sanitizer with kind `credentials-key` will sanitize flow to
138+
* all sinks, not just sinks with the same kind.
136139
*/
137140
private class ModelsAsDataBarrier extends Barrier {
138141
CryptographicValueKind kind;

0 commit comments

Comments
 (0)