hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Simplify Ratpack API using standard abstract classes

Browse Source
This commit is contained in:
Jonathan Leitschuh
2021-04-30 17:57:42 -04:00
parent b2e3df29b3
commit 18c74c5030
1 changed files with 2 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
java/ql/src/semmle/code/java/frameworks/ratpack/Ratpack.qll
View File

@@ -91,23 +91,11 @@ class RatpackHeader extends RefType {
}
}
private class RatpackHeaderTaintPropigatingMethod extends Method {
private class RatpackHeaderTaintPropigatingMethod extends Method, TaintPreservingCallable {
RatpackHeaderTaintPropigatingMethod() {
getDeclaringType() instanceof RatpackHeader and
hasName(["get", "getAll", "getNames", "asMultiValueMap"])
}
}
class TaintPropigatingHeaderMethod extends AdditionalTaintStep {
override predicate step(DataFlow::Node node1, DataFlow::Node node2) {
stepHeaderPropigatingTaint(node1, node2)
}
private predicate stepHeaderPropigatingTaint(DataFlow::Node node1, DataFlow::Node node2) {
exists(MethodAccess ma |
ma.getMethod() instanceof RatpackHeaderTaintPropigatingMethod and
node2.asExpr() = ma and
node1.asExpr() = ma.getQualifier()
)
}
override predicate returnsTaintFrom(int arg) { arg = -1 }
}