mirror of
https://github.com/hohn/codeql-lab.git
synced 2025-12-16 18:03:08 +01:00
19 lines
479 B
Plaintext
19 lines
479 B
Plaintext
/**
|
|
* @name Illustrations
|
|
* @description Illustrations of some codeql classes.
|
|
* @kind table
|
|
*/
|
|
|
|
import java
|
|
import semmle.code.java.dataflow.FlowSources
|
|
import semmle.code.java.security.SqlInjectionQuery
|
|
import QueryInjectionFlow::PathGraph
|
|
|
|
// Find starting points -- UserInput etc. -- from
|
|
// ql/cpp/ql/src/Security/CWE/CWE-089/SqlTainted.ql
|
|
|
|
// using QueryInjectionSink shows a sink. So we're missing a source.
|
|
|
|
from UserInput ui, QueryInjectionSink qsi
|
|
select ui, qsi
|