hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 03:36:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

additional qldoc commentes

Browse Source
This commit is contained in:
Alvaro Muñoz
2020-11-10 10:48:47 +01:00
parent 3545edb92c
commit 24a47fbb0f
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.ql
View File

@@ -14,6 +14,9 @@ import semmle.code.java.dataflow.TaintTracking
import semmle.code.java.dataflow.FlowSources import semmle.code.java.dataflow.FlowSources
import DataFlow::PathGraph import DataFlow::PathGraph
/**
* A message interpolator Type that perform Expression Language (EL) evaluations
*/
class ELMessageInterpolatorType extends RefType { class ELMessageInterpolatorType extends RefType {
ELMessageInterpolatorType() { ELMessageInterpolatorType() {
this this
@@ -46,6 +49,10 @@ class SetSafeMessageInterpolatorCall extends MethodAccess {
} }
} }
/**
* A method named `buildConstraintViolationWithTemplate` declared on a subtype
* of `javax.validation.ConstraintValidatorContext`.
*/
class BuildConstraintViolationWithTemplateMethod extends Method { class BuildConstraintViolationWithTemplateMethod extends Method {
BuildConstraintViolationWithTemplateMethod() { BuildConstraintViolationWithTemplateMethod() {
this this
@@ -56,6 +63,10 @@ class BuildConstraintViolationWithTemplateMethod extends Method {
} }
} }
/**
* Taint tracking BeanValidationConfiguration describing the flow of data from user input
* to the argument of a method that builds constraint error messages.
*/
class BeanValidationConfig extends TaintTracking::Configuration { class BeanValidationConfig extends TaintTracking::Configuration {
BeanValidationConfig() { this = "BeanValidationConfig" } BeanValidationConfig() { this = "BeanValidationConfig" }