mirror of
https://github.com/hohn/codeql-lab.git
synced 2025-12-16 18:03:08 +01:00
14 lines
381 B
Plaintext
14 lines
381 B
Plaintext
import java
|
|
private import semmle.code.java.dataflow.ExternalFlow
|
|
private import semmle.code.java.dataflow.DataFlow
|
|
|
|
from DataFlow::Node n, string type
|
|
where sinkNode(n, type)
|
|
and type = "code-injection"
|
|
select n, type
|
|
|
|
// // See if we have calls to eval() in the library
|
|
// from Call c
|
|
// where c.getCallee().hasQualifiedName("redis.clients.jedis","Jedis", "eval")
|
|
// select c
|