Merge pull request #13916 from erik-krogh/limit-java-field-reg

Java: limit field flow when tracking regex strings
This commit is contained in:
Erik Krogh Kristensen
2023-08-18 12:14:31 +02:00
committed by GitHub

View File

@@ -148,6 +148,8 @@ private module RegexFlowConfig implements DataFlow::ConfigSig {
predicate isBarrier(DataFlow::Node node) {
node.getEnclosingCallable().getDeclaringType() instanceof NonSecurityTestClass
}
int fieldFlowBranchLimit() { result = 1 }
}
private module RegexFlow = DataFlow::Global<RegexFlowConfig>;