codeql icon indicating copy to clipboard operation
codeql copied to clipboard

Java: make a separate threat model kind for reverse DNS sources

Open owen-mc opened this issue 1 year ago • 0 comments

I'm new to threat models, so I may be missing something that is required. In particular, is it okay to have a threat model kind that isn't part of the hierarchy controlled by this file?

Also, I searched for other reverse DNS sources and only found this one in C#, which seems to be only be used in one query currently. Any opinion on whether that should be made a source that applies to all queries and added to this new threat model kind? (I think this should be follow-up work.)

owen-mc avatar Jun 14 '24 12:06 owen-mc