Modify sink and improve SQL injection detection

This commit is contained in:
haby0
2021-08-04 10:57:34 +08:00
parent 69690a2509
commit 31400df0d4
8 changed files with 237 additions and 142 deletions

View File

@@ -37,6 +37,12 @@ abstract class MyBatisMapperSqlOperation extends MyBatisMapperXMLElement {
* Gets the `<include>` element in a `MyBatisMapperSqlOperation`.
*/
MyBatisMapperInclude getInclude() { result = getAChild*() }
Method getMapperMethod() {
result.getName() = this.getId() and
result.getDeclaringType() = this.getParent().(MyBatisMapperXMLElement).getNamespaceRefType()
}
}
/**