Track taint through java.io.File constructor and #toURI; URI#toURL

2026-05-05 13:45:19 +02:00 · 2020-10-10 20:29:01 +02:00
parent c8cacb9fee
commit 0c70be145f
3 changed files with 15 additions and 0 deletions
--- a/java/ql/test/library-tests/dataflow/taint/B.java
+++ b/java/ql/test/library-tests/dataflow/taint/B.java
@@ -129,6 +129,9 @@ public class B {
    String[][][] taintedArray3 = new String[][][] { { { s } } };
    sink(taintedArray3);

+    // Tainted file path and URI
+    sink(new java.io.File(s).toURI().toURL());
+
    return;
  }