Add EnumType to SimpleTypeSanitizer

2026-04-22 23:35:14 +02:00 · 2025-04-09 12:12:35 +01:00
parent b6053e3f91
commit 0a293cf357
1 changed files with 2 additions and 1 deletions
--- a/java/ql/lib/semmle/code/java/security/Sanitizers.qll
+++ b/java/ql/lib/semmle/code/java/security/Sanitizers.qll
@@ -23,6 +23,7 @@ class SimpleTypeSanitizer extends DataFlow::Node {
    this.getType()
        .(RefType)
        .getASourceSupertype*()
-        .hasQualifiedName("java.time.temporal", "TemporalAccessor")
+        .hasQualifiedName("java.time.temporal", "TemporalAccessor") or
+    this.getType() instanceof EnumType
  }
 }