hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Added CompiledAccExpression sink for MVEL injections

Browse Source
This commit is contained in:
Artem Smotrakov
2020-04-24 23:17:52 +02:00
parent 32ff5ad496
commit 12e0234d40
5 changed files with 83 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/test/stubs/mvel2-2.4.7/org/mvel2/ParserContext.java Normal file
View File

@@ -0,0 +1,3 @@
package org.mvel2;
public class ParserContext {}

10
java/ql/test/stubs/mvel2-2.4.7/org/mvel2/compiler/CompiledAccExpression.java Normal file
View File

@@ -0,0 +1,10 @@
package org.mvel2.compiler;
import org.mvel2.ParserContext;
import org.mvel2.integration.VariableResolverFactory;
public class CompiledAccExpression implements ExecutableStatement {
public CompiledAccExpression(char[] expression, Class ingressType, ParserContext context) {}
public Object getValue(Object staticContext, VariableResolverFactory factory) { return null; }
public Object getValue(Object ctx, Object elCtx, VariableResolverFactory variableFactory) { return null; }
}