hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-28 12:53:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Use set literals for OGNL packages

Browse Source
This commit is contained in:
Tony Torralba
2021-05-17 16:56:37 +02:00
parent 8d682000b4
commit 1815656a02
1 changed files with 3 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
java/ql/src/semmle/code/java/security/OgnlInjection.qll
View File

@@ -53,25 +53,18 @@ private class DefaultOgnlInjectionSink extends OgnlInjectionSink {
/** The class `org.apache.commons.ognl.Ognl` or `ognl.Ognl`. */
private class TypeOgnl extends Class {
TypeOgnl() {
this.hasQualifiedName("org.apache.commons.ognl", "Ognl") or
this.hasQualifiedName("ognl", "Ognl")
}
TypeOgnl() { this.hasQualifiedName(["org.apache.commons.ognl", "ognl"], "Ognl") }
}
/** The interface `org.apache.commons.ognl.Node` or `ognl.Node`. */
private class TypeNode extends Interface {
TypeNode() {
this.hasQualifiedName("org.apache.commons.ognl", "Node") or
this.hasQualifiedName("ognl", "Node")
}
TypeNode() { this.hasQualifiedName(["org.apache.commons.ognl", "ognl"], "Node") }
}
/** The interface `org.apache.commons.ognl.enhance.ExpressionAccessor` or `ognl.enhance.ExpressionAccessor`. */
private class TypeExpressionAccessor extends Interface {
TypeExpressionAccessor() {
this.hasQualifiedName("org.apache.commons.ognl.enhance", "ExpressionAccessor") or
this.hasQualifiedName("ognl.enhance", "ExpressionAccessor")
this.hasQualifiedName(["org.apache.commons.ognl.enhance", "ognl.enhance"], "ExpressionAccessor")
}
}