Merge pull request #18178 from hvitved/csharp/unsafe-crypto-transform…

…-from-source

C#: Restrict `cs/thread-unsafe-icryptotransform-field-in-class` to source fields

csharp/ql/src/Likely Bugs/ThreadUnsafeICryptoTransform.ql

@@ -52,6 +52,7 @@ class ICryptoTransform extends ValueOrRefType {
 }
 
 from UnsafeField field
+where field.fromSource()
 select field,
   "Static field '" + field.getName() +
     "' contains a 'System.Security.Cryptography.ICryptoTransform' that could be used in an unsafe way."