Only generate models for local supertypes

Avoid generating models for classes
implementing external SPI (e.g. `FileFilter`).
Keep `toString` models intact as they're
commonly used as taint-propagation method
(e.g. see `Joiner`).
This commit is contained in:
Benjamin Muskalla
2021-10-21 10:59:55 +02:00
parent 157f56f48a
commit 0e9fcc6c39
6 changed files with 51 additions and 11 deletions

View File

@@ -29,7 +29,7 @@ class FromSourceConfiguration extends TaintTracking::Configuration {
}
}
// TODO: better way than rely on internals?
// TODO: better way than rely on internals to capture kind?
cached
predicate specificSourceNode(DataFlow::Node node, string output, string kind) {
exists(InterpretNode n | Private::External::isSourceNode(n, output, kind) and n.asNode() = node)