Exclude regexes from test code

This commit is contained in:
Joe Farebrother
2022-03-16 14:22:50 +00:00
parent 6794268a3c
commit 04edc10f1e

View File

@@ -7,6 +7,7 @@ private import semmle.code.java.dataflow.DataFlow
private import semmle.code.java.dataflow.DataFlow2
private import semmle.code.java.dataflow.DataFlow3
private import RegexFlowModels
private import semmle.code.java.security.SecurityTests
private class RegexCompileFlowConf extends DataFlow2::Configuration {
RegexCompileFlowConf() { this = "RegexCompileFlowConfig" }
@@ -207,6 +208,10 @@ private class RegexMatchFlowConf extends DataFlow2::Configuration {
override predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
any(RegexAdditionalFlowStep s).step(node1, node2)
}
override predicate isBarrier(DataFlow::Node node) {
node.getEnclosingCallable().getDeclaringType() instanceof NonSecurityTestClass
}
}
/**