hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 03:36:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from review.

Browse Source
This commit is contained in:
intrigus
2020-12-09 23:29:59 +01:00
parent 70b0703952
commit 0a9df07df7
2 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql
View File

@@ -4,16 +4,20 @@
* @kind path-problem
* @problem.severity error
* @precision high
* @id java/everything-accepting-hostname-verifier
* @id java/insecure-hostname-verifier
* @tags security
* external/cwe/cwe-297
*/
import java
import semmle.code.java.security.Encryption
import semmle.code.java.dataflow.DataFlow
import DataFlow::PathGraph
import semmle.code.java.controlflow.Guards
import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.FlowSources
import semmle.code.java.dataflow.TaintTracking2
import semmle.code.java.security.Encryption
import DataFlow::PathGraph
/**
* Holds if `m` always returns `true` ignoring any exceptional flow.