hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add missing QLDocs

Browse Source
This commit is contained in:
Ed Minnix
2023-03-20 08:10:07 -04:00
parent 84fd5f7ee0
commit 1c661fd3ac
2 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/lib/semmle/code/java/security/XxeLocalQuery.qll
View File

@@ -24,6 +24,9 @@ deprecated class XxeLocalConfig extends TaintTracking::Configuration {
}
}
/**
* A taint-tracking configuration for unvalidated local user input that is used in XML external entity expansion.
*/
module XxeLocalConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node src) { src instanceof LocalUserInput }
@@ -36,4 +39,7 @@ module XxeLocalConfig implements DataFlow::ConfigSig {
}
}
/**
* Detect taint flow of unvalidated local user input that is used in XML external entity expansion.
*/
module XxeLocalFlow = TaintTracking::Make<XxeLocalConfig>;

6
java/ql/lib/semmle/code/java/security/XxeRemoteQuery.qll
View File

@@ -24,6 +24,9 @@ deprecated class XxeConfig extends TaintTracking::Configuration {
}
}
/**
* A taint-tracking configuration for unvalidated remote user input that is used in XML external entity expansion.
*/
module XxeConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node src) { src instanceof RemoteFlowSource }
@@ -36,4 +39,7 @@ module XxeConfig implements DataFlow::ConfigSig {
}
}
/**
* Detect taint flow of unvalidated remote user input that is used in XML external entity expansion.
*/
module XxeFlow = TaintTracking::Make<XxeConfig>;