hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove local user input and use fluent model

Browse Source
This commit is contained in:
luchua-bc
2021-09-27 17:33:04 +00:00
parent 5264936fc3
commit 378db7de87
4 changed files with 5 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/test/experimental/query-tests/security/CWE-400/ThreadResourceAbuse.java
View File

@@ -33,7 +33,7 @@ public class ThreadResourceAbuse extends HttpServlet {
}
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
// Get thread pause time from init container parameter
// Get thread pause time from init container parameter (not detected because LocalUserInput tends to add a lot of FP)
String delayTimeStr = getServletContext().getInitParameter("DelayTime");
try {
int delayTime = Integer.valueOf(delayTimeStr);