Rust/InsecureCookie

d10c · d10c · commit ed26f001ad67 · 2025-10-15T15:07:34.000+02:00
diff --git a/rust/ql/src/queries/security/CWE-614/InsecureCookie.ql b/rust/ql/src/queries/security/CWE-614/InsecureCookie.ql
@@ -74,7 +74,9 @@ module PartitionedCookieConfig implements DataFlow::ConfigSig {
     node instanceof Barrier
   }
 
-  predicate observeDiffInformedIncrementalMode() { any() }
+  predicate observeDiffInformedIncrementalMode() {
+    none() // only used negatively
+  }
 }
 
 module InsecureCookieFlow = TaintTracking::Global<InsecureCookieConfig>;

Original file line number	Diff line number	Diff line change
`@@ -74,7 +74,9 @@ module PartitionedCookieConfig implements DataFlow::ConfigSig {`
`74`	`74`	`node instanceof Barrier`
`75`	`75`	`}`
`76`	`76`
`77`		`- predicate observeDiffInformedIncrementalMode() { any() }`
	`77`	`+ predicate observeDiffInformedIncrementalMode() {`
	`78`	`+ none() // only used negatively`
	`79`	`+ }`
`78`	`80`	`}`
`79`	`81`
`80`	`82`	`module InsecureCookieFlow = TaintTracking::Global<InsecureCookieConfig>;`