hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Let RemoteFlowSource and LocalUserInput extends SourceNode and fine grain the LocalUserInput threat models.

Browse Source
This commit is contained in:
Michael Nebel
2023-09-19 15:40:39 +02:00
parent 9a112dde66
commit 2055d5492c
2 changed files with 58 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/frameworks/hudson/Hudson.qll
View File

@@ -24,6 +24,8 @@ private class FilePathRead extends LocalUserInput {
"readToString"
])
}
override string getThreatModel() { result = "file" }
}
private class HudsonUtilXssSanitizer extends XssSanitizer {