[DIFF-INFORMED] Java: TaintedEnvironmentVariable

https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql#L22
2026-03-01 13:23:49 +01:00 · 2025-07-16 15:50:56 +02:00
parent b3b139bb02
commit 3785dbec9e
1 changed files with 4 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
@@ -38,6 +38,10 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig {
      ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier())
    )
  }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
+
+  Location getASelectedSourceLocation(DataFlow::Node source) { none() }
 }

 /**