C#: Use TaintTracking2 in cs/inappropriate-encoding

hvitved · hvitved · commit 1e46509a2aff · 2019-08-19T17:18:49.000+02:00
diff --git a/csharp/ql/src/Security Features/CWE-838/InappropriateEncoding.ql b/csharp/ql/src/Security Features/CWE-838/InappropriateEncoding.ql
@@ -11,7 +11,6 @@
  */
 
 import csharp
-import DataFlow
 import semmle.code.csharp.frameworks.System
 import semmle.code.csharp.frameworks.system.Net
 import semmle.code.csharp.frameworks.system.Web
@@ -20,13 +19,15 @@ import semmle.code.csharp.security.dataflow.SqlInjection
 import semmle.code.csharp.security.dataflow.XSS
 import semmle.code.csharp.security.dataflow.UrlRedirect
 import semmle.code.csharp.security.Sanitizers
-import semmle.code.csharp.dataflow.DataFlow::DataFlow::PathGraph
+import semmle.code.csharp.dataflow.DataFlow2::DataFlow2
+import semmle.code.csharp.dataflow.DataFlow2::DataFlow2::PathGraph
+import semmle.code.csharp.dataflow.TaintTracking2
 
 /**
  * A configuration for specifying expressions that must be
  * encoded, along with a set of potential valid encoded values.
  */
-abstract class RequiresEncodingConfiguration extends TaintTracking::Configuration {
+abstract class RequiresEncodingConfiguration extends TaintTracking2::Configuration {
   bindingset[this]
   RequiresEncodingConfiguration() { any() }
 
