add request forgery query

This commit is contained in:
Porcupiney Hairs
2020-05-11 01:21:38 +05:30
parent 1e048d8045
commit 38de9b6433
54 changed files with 1771 additions and 26 deletions

View File

@@ -0,0 +1,11 @@
import javax.ws.rs.client.*;
public class JaxWsSSRF {
public static void main(String[] args) {
Client client = ClientBuilder.newClient();
String url = args[1];
client.target(url);
}
}

View File

@@ -0,0 +1,64 @@
edges
| JaxWsSSRF.java:4:29:4:41 | args : String[] | JaxWsSSRF.java:7:23:7:25 | url |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:55:32:55:35 | url1 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:58:32:58:35 | url1 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:59:30:59:33 | url1 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:63:65:63:68 | uri2 |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:64:59:64:61 | uri |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:67:43:67:45 | uri |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:69:29:69:32 | uri2 |
| RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:22:52:22:54 | uri |
| RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:27:57:27:59 | uri |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:17:73:17:93 | ... + ... |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:21:69:21:82 | fooResourceUrl |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:25:68:25:81 | fooResourceUrl |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:28:73:28:86 | fooResourceUrl |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:36:59:36:72 | fooResourceUrl |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:39:74:39:96 | new URI(...) |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:43:57:43:70 | fooResourceUrl |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:46:58:46:71 | fooResourceUrl |
| SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:49:30:49:43 | fooResourceUrl |
nodes
| JaxWsSSRF.java:4:29:4:41 | args : String[] | semmle.label | args : String[] |
| JaxWsSSRF.java:7:23:7:25 | url | semmle.label | url |
| RequestForgery2.java:23:27:23:53 | getParameter(...) : String | semmle.label | getParameter(...) : String |
| RequestForgery2.java:55:32:55:35 | url1 | semmle.label | url1 |
| RequestForgery2.java:58:32:58:35 | url1 | semmle.label | url1 |
| RequestForgery2.java:59:30:59:33 | url1 | semmle.label | url1 |
| RequestForgery2.java:63:65:63:68 | uri2 | semmle.label | uri2 |
| RequestForgery2.java:64:59:64:61 | uri | semmle.label | uri |
| RequestForgery2.java:67:43:67:45 | uri | semmle.label | uri |
| RequestForgery2.java:69:29:69:32 | uri2 | semmle.label | uri2 |
| RequestForgery.java:19:31:19:57 | getParameter(...) : String | semmle.label | getParameter(...) : String |
| RequestForgery.java:22:52:22:54 | uri | semmle.label | uri |
| RequestForgery.java:27:57:27:59 | uri | semmle.label | uri |
| SpringSSRF.java:11:29:11:41 | args : String[] | semmle.label | args : String[] |
| SpringSSRF.java:17:73:17:93 | ... + ... | semmle.label | ... + ... |
| SpringSSRF.java:21:69:21:82 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:25:68:25:81 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:28:73:28:86 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:36:59:36:72 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:39:74:39:96 | new URI(...) | semmle.label | new URI(...) |
| SpringSSRF.java:43:57:43:70 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:46:58:46:71 | fooResourceUrl | semmle.label | fooResourceUrl |
| SpringSSRF.java:49:30:49:43 | fooResourceUrl | semmle.label | fooResourceUrl |
#select
| JaxWsSSRF.java:7:23:7:25 | url | JaxWsSSRF.java:4:29:4:41 | args : String[] | JaxWsSSRF.java:7:23:7:25 | url | Potential server side request forgery due to $@. | JaxWsSSRF.java:4:29:4:41 | args | a user-provided value |
| RequestForgery2.java:55:32:55:35 | url1 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:55:32:55:35 | url1 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:58:32:58:35 | url1 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:58:32:58:35 | url1 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:59:30:59:33 | url1 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:59:30:59:33 | url1 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:63:65:63:68 | uri2 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:63:65:63:68 | uri2 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:64:59:64:61 | uri | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:64:59:64:61 | uri | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:67:43:67:45 | uri | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:67:43:67:45 | uri | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery2.java:69:29:69:32 | uri2 | RequestForgery2.java:23:27:23:53 | getParameter(...) : String | RequestForgery2.java:69:29:69:32 | uri2 | Potential server side request forgery due to $@. | RequestForgery2.java:23:27:23:53 | getParameter(...) | a user-provided value |
| RequestForgery.java:22:52:22:54 | uri | RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:22:52:22:54 | uri | Potential server side request forgery due to $@. | RequestForgery.java:19:31:19:57 | getParameter(...) | a user-provided value |
| RequestForgery.java:27:57:27:59 | uri | RequestForgery.java:19:31:19:57 | getParameter(...) : String | RequestForgery.java:27:57:27:59 | uri | Potential server side request forgery due to $@. | RequestForgery.java:19:31:19:57 | getParameter(...) | a user-provided value |
| SpringSSRF.java:17:73:17:93 | ... + ... | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:17:73:17:93 | ... + ... | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:21:69:21:82 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:21:69:21:82 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:25:68:25:81 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:25:68:25:81 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:28:73:28:86 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:28:73:28:86 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:36:59:36:72 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:36:59:36:72 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:39:74:39:96 | new URI(...) | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:39:74:39:96 | new URI(...) | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:43:57:43:70 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:43:57:43:70 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:46:58:46:71 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:46:58:46:71 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |
| SpringSSRF.java:49:30:49:43 | fooResourceUrl | SpringSSRF.java:11:29:11:41 | args : String[] | SpringSSRF.java:49:30:49:43 | fooResourceUrl | Potential server side request forgery due to $@. | SpringSSRF.java:11:29:11:41 | args | a user-provided value |

View File

@@ -0,0 +1,34 @@
import java.io.IOException;
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class RequestForgery extends HttpServlet {
private static final String VALID_URI = "http://lgtm.com";
private HttpClient client = HttpClient.newHttpClient();
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
try {
URI uri = new URI(request.getParameter("uri"));
// BAD: a request parameter is incorporated without validation into a Http
// request
HttpRequest r = HttpRequest.newBuilder(uri).build();
client.send(r, null);
// GOOD: the request parameter is validated against a known fixed string
if (VALID_URI.equals(request.getParameter("uri"))) {
HttpRequest r2 = HttpRequest.newBuilder(uri).build();
client.send(r2, null);
}
} catch (Exception e) {
// TODO: handle exception
}
}
}

View File

@@ -0,0 +1 @@
experimental/CWE-918/RequestForgery.ql

View File

@@ -0,0 +1,84 @@
import java.io.IOException;
import java.net.URI;
import java.net.*;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.Proxy.Type;
import java.io.InputStream;
import org.apache.http.client.methods.HttpGet;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class RequestForgery2 extends HttpServlet {
private static final String VALID_URI = "http://lgtm.com";
private HttpClient client = HttpClient.newHttpClient();
protected void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
try {
String sink = request.getParameter("uri");
// URI(String str)
URI uri = new URI(sink);
// URI(String scheme, String ssp, String fragment)
URI uri2 = new URI("http", sink, "fragement");
// URI(String scheme, String userInfo, String host, int port, String path,
// String query, String fragment)
URI uri3 = new URI("http", "userinfo", "host", 1, "path", "query", "fragment");
// URI(String scheme, String host, String path, String fragment)
URI uri4 = new URI("http", "host", "path", "fragment");
// URI(String scheme, String authority, String path, String query, String
// fragment)
URI uri5 = new URI("http", "authority", "path", "query", "fragment");
URI uri6 = URI.create("http://foo.com/");
// URL(String spec)
URL url1 = new URL(sink);
// URL(String protocol, String host, int port, String file)
URL url2 = new URL("http", "host", 1, "file");
// URL(String protocol, String host, String file)
URL url3 = new URL("http", "host", "file");
// URL(URL context, String spec)
URL url4 = new URL(url3, "http");
// URL(String protocol, String host, int port, String file, URLStreamHandler
// handler)
URL url5 = new URL("http", "host", 1, "file", new Helper2());
// URL(URL context, String spec, URLStreamHandler handler)
URL url6 = new URL(url3, "spec", new Helper2());
URLConnection c1 = url1.openConnection();
SocketAddress sa = new SocketAddress() {
};
URLConnection c2 = url1.openConnection(new Proxy(Type.HTTP, sa));
InputStream c3 = url1.openStream();
// java.net.http
HttpClient client = HttpClient.newHttpClient();
HttpRequest request2 = HttpRequest.newBuilder().uri(uri2).build();
HttpRequest request3 = HttpRequest.newBuilder(uri).build();
// Apache HTTPlib
HttpGet httpGet = new HttpGet(uri);
HttpGet httpGet2 = new HttpGet();
httpGet2.setURI(uri2);
} catch (Exception e) {
// TODO: handle exception
}
}
}
class Helper2 extends URLStreamHandler {
Helper2() {
}
protected URLConnection openConnection(URL u) throws IOException {
return null;
}
}

View File

@@ -0,0 +1,72 @@
import java.io.IOException;
import java.io.InputStream;
import java.net.Proxy;
import java.net.SocketAddress;
import java.net.URI;
import java.net.URL;
import java.net.URLConnection;
import java.net.URLStreamHandler;
import java.net.Proxy.Type;
import org.apache.http.client.methods.HttpGet;
// import java.net.http.HttpClient;
// import java.net.http.HttpRequest;
public class Sinks {
public static void main(String[] args) throws Exception {
// URI(String str)
URI uri = new URI("uri1");
// URI(String scheme, String ssp, String fragment)
URI uri2 = new URI("http", "ssp", "fragement");
// URI(String scheme, String userInfo, String host, int port, String path,
// String query, String fragment)
URI uri3 = new URI("http", "userinfo", "host", 1, "path", "query", "fragment");
// URI(String scheme, String host, String path, String fragment)
URI uri4 = new URI("http", "host", "path", "fragment");
// URI(String scheme, String authority, String path, String query, String
// fragment)
URI uri5 = new URI("http", "authority", "path", "query", "fragment");
URI uri6 = URI.create("http://foo.com/");
// URL(String spec)
URL url1 = new URL("spec");
// URL(String protocol, String host, int port, String file)
URL url2 = new URL("http", "host", 1, "file");
// URL(String protocol, String host, String file)
URL url3 = new URL("http", "host", "file");
// URL(URL context, String spec)
URL url4 = new URL(url3, "http");
// URL(String protocol, String host, int port, String file, URLStreamHandler
// handler)
URL url5 = new URL("http", "host", 1, "file", new Helper());
// URL(URL context, String spec, URLStreamHandler handler)
URL url6 = new URL(url3, "spec", new Helper());
URLConnection c1 = url1.openConnection();
SocketAddress sa = new SocketAddress() {
};
URLConnection c2 = url1.openConnection(new Proxy(Type.HTTP, sa));
InputStream c3 = url1.openStream();
// java.net.http
// HttpClient client = HttpClient.newHttpClient();
// HttpRequest request2 = HttpRequest.newBuilder().uri(uri2).build();
// HttpRequest request3 = HttpRequest.newBuilder(uri).build();
// Apache HTTPlib
HttpGet httpGet = new HttpGet(uri);
HttpGet httpGet2 = new HttpGet();
httpGet2.setURI(uri2);
}
}
class Helper extends URLStreamHandler {
@Override
protected URLConnection openConnection(URL arg0) throws IOException {
return null;
}
}

View File

@@ -0,0 +1,52 @@
import org.springframework.web.client.RestTemplate;
import org.springframework.http.RequestEntity;
import org.springframework.http.ResponseEntity;
import org.springframework.http.HttpEntity;
import org.springframework.http.HttpStatus;
import java.net.URI;
import org.springframework.http.HttpMethod;
public class SpringSSRF {
public static void main(String[] args) throws Exception {
RestTemplate restTemplate = new RestTemplate();
String fooResourceUrl = args[1];
HttpEntity<String> request = new HttpEntity<>(new String("bar"));
{
ResponseEntity<String> response = restTemplate.getForEntity(fooResourceUrl + "/1", String.class);
}
{
ResponseEntity<String> response = restTemplate.exchange(fooResourceUrl, HttpMethod.POST, request,
String.class);
}
{
ResponseEntity<String> response = restTemplate.execute(fooResourceUrl, HttpMethod.POST, null, null, "test");
}
{
ResponseEntity<String> response = restTemplate.getForEntity(fooResourceUrl, String.class, "test");
}
{
String body = new String("body");
RequestEntity<String> requestEntity = RequestEntity.post(new URI(fooResourceUrl)).body(body);
ResponseEntity<String> response = restTemplate.exchange(requestEntity, String.class);
}
{
String response = restTemplate.patchForObject(fooResourceUrl, new String("object"), String.class, "hi");
}
{
ResponseEntity<String> response = restTemplate.postForEntity(new URI(fooResourceUrl), new String("object"),
String.class);
}
{
URI response = restTemplate.postForLocation(fooResourceUrl, new String("object"));
}
{
String response = restTemplate.postForObject(fooResourceUrl, new String("object"), String.class);
}
{
restTemplate.put(fooResourceUrl, new String("object"));
}
}
}

View File

@@ -0,0 +1 @@
//semmle-extractor-options: --javac-args -source 11 -target 11 -cp ${testdir}/../../../../stubs/springframework-5.2.3:${testdir}/../../../stubs/javax-ws-rs-api-2.1.1:${testdir}/../../../stubs/apache-httpclient-4.5.12/:${testdir}/../../../../stubs/servlet-api-2.4/

View File

@@ -0,0 +1,19 @@
package org.apache.http.client.methods;
public class HttpGet extends org.apache.http.client.methods.HttpRequestBase {
public static final java.lang.String METHOD_NAME = "GET";
public HttpGet() {
}
public HttpGet(java.net.URI uri) {
}
public HttpGet(java.lang.String uri) {
}
public java.lang.String getMethod() {
return null;
}
}

View File

@@ -0,0 +1,17 @@
package org.apache.http.client.methods;
public abstract class HttpRequestBase {
private java.net.URI uri;
public HttpRequestBase() {
}
public java.net.URI getURI() {
return null;
}
public void setURI(java.net.URI uri) {
}
}

View File

@@ -0,0 +1,12 @@
package javax.ws.rs.client;
public abstract interface Client extends javax.ws.rs.core.Configurable {
public abstract javax.ws.rs.client.WebTarget target(java.lang.String arg0);
public abstract javax.ws.rs.client.WebTarget target(java.net.URI arg0);
public abstract javax.ws.rs.client.WebTarget target(javax.ws.rs.core.UriBuilder arg0);
public abstract javax.ws.rs.client.WebTarget target(javax.ws.rs.core.Link arg0);
}

View File

@@ -0,0 +1,19 @@
package javax.ws.rs.client;
public abstract class ClientBuilder implements javax.ws.rs.core.Configurable {
protected ClientBuilder() {
}
public static javax.ws.rs.client.ClientBuilder newBuilder() {
return null;
}
public static javax.ws.rs.client.Client newClient() {
return null;
}
public static javax.ws.rs.client.Client newClient(javax.ws.rs.core.Configuration configuration) {
return null;
}
}

View File

@@ -0,0 +1,4 @@
package javax.ws.rs.client;
public abstract interface WebTarget extends javax.ws.rs.core.Configurable {
}

View File

@@ -0,0 +1,6 @@
package javax.ws.rs.core;
public abstract interface Configurable<C extends javax.ws.rs.core.Configurable> {
public abstract javax.ws.rs.core.Configuration getConfiguration();
}

View File

@@ -0,0 +1,3 @@
package javax.ws.rs.core;
public abstract interface Configuration {}

View File

@@ -0,0 +1,61 @@
package javax.ws.rs.core;
public abstract class Link {
public static final java.lang.String TITLE = "title";
public static final java.lang.String REL = "rel";
public static final java.lang.String TYPE = "type";
public Link() {
}
public abstract java.net.URI getUri();
public abstract javax.ws.rs.core.UriBuilder getUriBuilder();
public abstract java.lang.String getRel();
public abstract java.util.List<java.lang.String> getRels();
public abstract java.lang.String getTitle();
public abstract java.lang.String getType();
public abstract java.util.Map<java.lang.String, java.lang.String> getParams();
public abstract java.lang.String toString();
public static javax.ws.rs.core.Link valueOf(java.lang.String value) {
return null;
}
// public static javax.ws.rs.core.Link.Builder fromUri(java.net.URI uri) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromUri(java.lang.String uri) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromUriBuilder(javax.ws.rs.core.UriBuilder uriBuilder) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromLink(javax.ws.rs.core.Link link) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromPath(java.lang.String path) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromResource(java.lang.Class<?> resource) {
// return null;
// }
// public static javax.ws.rs.core.Link.Builder fromMethod(java.lang.Class<?> resource, java.lang.String method) {
// return null;
// }
}

View File

@@ -0,0 +1,62 @@
// Failed to get sources. Instead, stub sources have been generated by the disassembler.
// Implementation of methods is unavailable.
package javax.ws.rs.core;
public abstract class UriBuilder {
protected UriBuilder() {
}
protected static javax.ws.rs.core.UriBuilder newInstance() {
return null;
}
public static javax.ws.rs.core.UriBuilder fromUri(java.net.URI uri) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromUri(java.lang.String uriTemplate) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromLink(javax.ws.rs.core.Link link) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromPath(java.lang.String path)
throws java.lang.IllegalArgumentException {
return null;
}
public static javax.ws.rs.core.UriBuilder fromResource(java.lang.Class<?> resource) {
return null;
}
public static javax.ws.rs.core.UriBuilder fromMethod(java.lang.Class<?> resource, java.lang.String method) {
return null;
}
public abstract javax.ws.rs.core.UriBuilder clone();
public abstract javax.ws.rs.core.UriBuilder uri(java.net.URI arg0);
public abstract javax.ws.rs.core.UriBuilder uri(java.lang.String arg0);
public abstract java.net.URI buildFromMap(java.util.Map<java.lang.String, ?> arg0);
public abstract java.net.URI buildFromMap(java.util.Map<java.lang.String, ?> arg0, boolean arg1)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI buildFromEncodedMap(java.util.Map<java.lang.String, ?> arg0)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI build(java.lang.Object... arg0)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI build(java.lang.Object[] arg0, boolean arg1)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
public abstract java.net.URI buildFromEncoded(java.lang.Object... arg0)
throws java.lang.IllegalArgumentException, javax.ws.rs.core.UriBuilderException;
}

View File

@@ -0,0 +1,18 @@
package javax.ws.rs.core;
public class UriBuilderException extends java.lang.RuntimeException {
private static final long serialVersionUID = 956255913370721193L;
public UriBuilderException() {
}
public UriBuilderException(java.lang.String msg) {
}
public UriBuilderException(java.lang.String msg, java.lang.Throwable cause) {
}
public UriBuilderException(java.lang.Throwable cause) {
}
}

View File

@@ -0,0 +1,59 @@
import java.io.IOException;
import java.io.InputStream;
import java.net.Proxy;
import java.net.SocketAddress;
import java.net.URI;
import java.net.URL;
import java.net.URLConnection;
import java.net.URLStreamHandler;
import java.net.Proxy.Type;
public class Uri {
public static void main(String[] args) throws Exception {
// URI(String str)
URI uri = new URI("uri1");
// URI(String scheme, String ssp, String fragment)
URI ur2 = new URI("http", "ssp", "fragement");
// URI(String scheme, String userInfo, String host, int port, String path,
// String query, String fragment)
URI uri3 = new URI("http", "userinfo", "host", 1, "path", "query", "fragment");
// URI(String scheme, String host, String path, String fragment)
URI uri4 = new URI("http", "host", "path", "fragment");
// URI(String scheme, String authority, String path, String query, String
// fragment)
URI uri5 = new URI("http", "authority", "path", "query", "fragment");
// URI.create(String str)
URI uri6 = URI.create("http://foo.com/");
// URL(String spec)
URL url1 = new URL("spec");
// URL(String protocol, String host, int port, String file)
URL url2 = new URL("http", "host", 1, "file");
// URL(String protocol, String host, String file)
URL url3 = new URL("http", "host", "file");
// URL(URL context, String spec)
URL url4 = new URL(url3, "http");
// URL(String protocol, String host, int port, String file, URLStreamHandler
// handler)
URL url5 = new URL("http", "host", 1, "file", new Helper());
// URL(URL context, String spec, URLStreamHandler handler)
URL url6 = new URL(url3, "spec", new Helper());
URLConnection c1 = url1.openConnection();
SocketAddress sa = new SocketAddress() {
};
URLConnection c2 = url1.openConnection(new Proxy(Type.HTTP, sa));
InputStream c3 = url1.openStream();
}
}
class Helper extends URLStreamHandler {
@Override
protected URLConnection openConnection(URL arg0) throws IOException {
return null;
}
}

View File

@@ -0,0 +1,2 @@
| Uri.java:46:28:46:48 | openConnection(...) |
| Uri.java:49:28:49:72 | openConnection(...) |

View File

@@ -0,0 +1,5 @@
import java
import semmle.code.java.frameworks.javase.URL
from UrlOpenConnectionMethod m
select m.getAReference()

View File

@@ -0,0 +1 @@
| Uri.java:50:26:50:42 | openStream(...) |

View File

@@ -0,0 +1,5 @@
import java
import semmle.code.java.frameworks.javase.URL
from UrlOpenStreamMethod m
select m.getAReference()

View File

@@ -0,0 +1,6 @@
| Uri.java:14:19:14:33 | new URI(...) | Uri.java:14:27:14:32 | "uri1" |
| Uri.java:17:19:17:53 | new URI(...) | Uri.java:17:35:17:39 | "ssp" |
| Uri.java:21:20:21:86 | new URI(...) | Uri.java:21:48:21:53 | "host" |
| Uri.java:23:20:23:62 | new URI(...) | Uri.java:23:36:23:41 | "host" |
| Uri.java:26:20:26:76 | new URI(...) | Uri.java:26:36:26:46 | "authority" |
| Uri.java:29:20:29:48 | create(...) | Uri.java:29:31:29:47 | "http://foo.com/" |

View File

@@ -0,0 +1,5 @@
import java
import semmle.code.java.frameworks.javase.URI
from UriCreation c
select c, c.hostArg()

View File

@@ -0,0 +1,4 @@
| Uri.java:32:20:32:34 | new URL(...) | Uri.java:32:28:32:33 | "spec" |
| Uri.java:34:20:34:53 | new URL(...) | Uri.java:34:36:34:41 | "host" |
| Uri.java:36:20:36:50 | new URL(...) | Uri.java:36:36:36:41 | "host" |
| Uri.java:41:20:41:67 | new URL(...) | Uri.java:41:36:41:41 | "host" |

View File

@@ -0,0 +1,5 @@
import java
import semmle.code.java.frameworks.javase.URL
from UrlConstructor c
select c, c.hostArg()

View File

@@ -30,5 +30,6 @@ public abstract class ServletInputStream extends InputStream {
protected ServletInputStream() {
}
public int readLine(byte[] b, int off, int len) throws IOException {
return 0;
}
}

View File

@@ -0,0 +1,27 @@
package org.springframework.core;
public abstract class ParameterizedTypeReference<T> {
public java.lang.reflect.Type getType() {
return null;
}
public boolean equals(java.lang.Object other) {
return false;
}
public int hashCode() {
return 0;
}
public java.lang.String toString() {
return null;
}
public static <T> org.springframework.core.ParameterizedTypeReference<T> forType(java.lang.reflect.Type type) {
return null;
}
private static java.lang.Class<?> findParameterizedTypeReferenceSubclass(java.lang.Class<?> child) {
return null;
}
}

View File

@@ -0,0 +1,40 @@
package org.springframework.http;
public class HttpEntity<T> {
protected HttpEntity() {
}
public HttpEntity(T body) {
}
public HttpEntity(org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers) {
}
public HttpEntity(T body, org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers) {
}
public org.springframework.http.HttpHeaders getHeaders() {
return null;
}
public T getBody() {
return null;
}
public boolean hasBody() {
return false;
}
public boolean equals(java.lang.Object other) {
return false;
}
public int hashCode() {
return 0;
}
public java.lang.String toString() {
return null;
}
}

View File

@@ -0,0 +1,4 @@
package org.springframework.http;
public class HttpHeaders implements java.io.Serializable {
}

View File

@@ -0,0 +1,20 @@
package org.springframework.http;
public enum HttpMethod {
GET,
HEAD,
POST,
PUT,
PATCH,
DELETE,
OPTIONS,
TRACE,
}

View File

@@ -0,0 +1,147 @@
package org.springframework.http;
public enum HttpStatus {
CONTINUE,
SWITCHING_PROTOCOLS,
PROCESSING,
CHECKPOINT,
OK,
CREATED,
ACCEPTED,
NON_AUTHORITATIVE_INFORMATION,
NO_CONTENT,
RESET_CONTENT,
PARTIAL_CONTENT,
MULTI_STATUS,
ALREADY_REPORTED,
IM_USED,
MULTIPLE_CHOICES,
MOVED_PERMANENTLY,
FOUND,
@java.lang.Deprecated
MOVED_TEMPORARILY,
SEE_OTHER,
NOT_MODIFIED,
@java.lang.Deprecated
USE_PROXY,
TEMPORARY_REDIRECT,
PERMANENT_REDIRECT,
BAD_REQUEST,
UNAUTHORIZED,
PAYMENT_REQUIRED,
FORBIDDEN,
NOT_FOUND,
METHOD_NOT_ALLOWED,
NOT_ACCEPTABLE,
PROXY_AUTHENTICATION_REQUIRED,
REQUEST_TIMEOUT,
CONFLICT,
GONE,
LENGTH_REQUIRED,
PRECONDITION_FAILED,
PAYLOAD_TOO_LARGE,
@java.lang.Deprecated
REQUEST_ENTITY_TOO_LARGE,
URI_TOO_LONG,
@java.lang.Deprecated
REQUEST_URI_TOO_LONG,
UNSUPPORTED_MEDIA_TYPE,
REQUESTED_RANGE_NOT_SATISFIABLE,
EXPECTATION_FAILED,
I_AM_A_TEAPOT,
@java.lang.Deprecated
INSUFFICIENT_SPACE_ON_RESOURCE,
@java.lang.Deprecated
METHOD_FAILURE,
@java.lang.Deprecated
DESTINATION_LOCKED,
UNPROCESSABLE_ENTITY,
LOCKED,
FAILED_DEPENDENCY,
TOO_EARLY,
UPGRADE_REQUIRED,
PRECONDITION_REQUIRED,
TOO_MANY_REQUESTS,
REQUEST_HEADER_FIELDS_TOO_LARGE,
UNAVAILABLE_FOR_LEGAL_REASONS,
INTERNAL_SERVER_ERROR,
NOT_IMPLEMENTED,
BAD_GATEWAY,
SERVICE_UNAVAILABLE,
GATEWAY_TIMEOUT,
HTTP_VERSION_NOT_SUPPORTED,
VARIANT_ALSO_NEGOTIATES,
INSUFFICIENT_STORAGE,
LOOP_DETECTED,
BANDWIDTH_LIMIT_EXCEEDED,
NOT_EXTENDED,
NETWORK_AUTHENTICATION_REQUIRED,
}

View File

@@ -0,0 +1,70 @@
package org.springframework.http;
public class RequestEntity<T> extends org.springframework.http.HttpEntity {
public RequestEntity(org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.http.HttpMethod method, java.net.URI url,
java.lang.reflect.Type type) {
}
public RequestEntity(org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers,
org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers,
org.springframework.http.HttpMethod method, java.net.URI url) {
}
public RequestEntity(T body, org.springframework.util.MultiValueMap<java.lang.String, java.lang.String> headers,
org.springframework.http.HttpMethod method, java.net.URI url, java.lang.reflect.Type type) {
}
public java.net.URI getUrl() {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder method(org.springframework.http.HttpMethod method,
java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder get(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder head(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder post(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder put(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.BodyBuilder patch(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder delete(java.net.URI url) {
return null;
}
public static org.springframework.http.RequestEntity.HeadersBuilder options(java.net.URI url) {
return null;
}
class HeadersBuilder<K> {
}
public class BodyBuilder<T> {
public RequestEntity<T> body(Object body){return null;};
}
}

View File

@@ -0,0 +1,12 @@
package org.springframework.http;
public class ResponseEntity<T> extends org.springframework.http.HttpEntity {
// private final java.lang.Object status;
// public ResponseEntity(org.springframework.http.HttpStatus status) {
// }
// public ResponseEntity(T body, org.springframework.http.HttpStatus status) {
// }
}

View File

@@ -0,0 +1,12 @@
package org.springframework.http.client;
public abstract interface ClientHttpResponse {
public abstract org.springframework.http.HttpStatus getStatusCode() throws java.io.IOException;
public abstract int getRawStatusCode() throws java.io.IOException;
public abstract java.lang.String getStatusText() throws java.io.IOException;
public abstract void close();
}

View File

@@ -0,0 +1,4 @@
package org.springframework.web.client;
public abstract interface RequestCallback {
}

View File

@@ -0,0 +1,4 @@
package org.springframework.web.client;
public abstract interface ResponseExtractor<K> {
}

View File

@@ -0,0 +1,12 @@
package org.springframework.web.client;
public class RestClientException extends Exception {
private static final long serialVersionUID = -4084444984163796577L;
public RestClientException(java.lang.String msg) {
}
public RestClientException(java.lang.String msg, java.lang.Throwable ex) {
}
}

View File

@@ -0,0 +1,237 @@
package org.springframework.web.client;
public class RestTemplate {
public <T> T getForObject(java.lang.String url, java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T getForObject(java.lang.String url, java.lang.Class<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T getForObject(java.net.URI url, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> getForEntity(java.lang.String url,
java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> getForEntity(java.lang.String url,
java.lang.Class<T> responseType, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> getForEntity(java.net.URI url,
java.lang.Class<T> responseType) throws org.springframework.web.client.RestClientException {
return null;
}
public org.springframework.http.HttpHeaders headForHeaders(java.lang.String url, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public org.springframework.http.HttpHeaders headForHeaders(java.lang.String url,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public org.springframework.http.HttpHeaders headForHeaders(java.net.URI url)
throws org.springframework.web.client.RestClientException {
return null;
}
public java.net.URI postForLocation(java.lang.String url, java.lang.Object request,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.net.URI postForLocation(java.lang.String url, java.lang.Object request,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.net.URI postForLocation(java.net.URI url, java.lang.Object request)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T postForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T postForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T postForObject(java.net.URI url, java.lang.Object request, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> postForEntity(java.lang.String url, java.lang.Object request,
java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> postForEntity(java.lang.String url, java.lang.Object request,
java.lang.Class<T> responseType, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> postForEntity(java.net.URI url, java.lang.Object request,
java.lang.Class<T> responseType) throws org.springframework.web.client.RestClientException {
return null;
}
public void put(java.lang.String url, java.lang.Object request, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void put(java.lang.String url, java.lang.Object request, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void put(java.net.URI url, java.lang.Object request)
throws org.springframework.web.client.RestClientException {
}
public <T> T patchForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T patchForObject(java.lang.String url, java.lang.Object request, java.lang.Class<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T patchForObject(java.net.URI url, java.lang.Object request, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public void delete(java.lang.String url, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void delete(java.lang.String url, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
}
public void delete(java.net.URI url) throws org.springframework.web.client.RestClientException {
}
public java.util.Set<org.springframework.http.HttpMethod> optionsForAllow(java.lang.String url,
java.lang.Object... uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.util.Set<org.springframework.http.HttpMethod> optionsForAllow(java.lang.String url,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public java.util.Set<org.springframework.http.HttpMethod> optionsForAllow(java.net.URI url)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
java.lang.Class<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
java.lang.Class<T> responseType, java.util.Map<java.lang.String, ?> uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.net.URI url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
java.lang.Class<T> responseType) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.lang.String url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(java.net.URI url,
org.springframework.http.HttpMethod method, org.springframework.http.HttpEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(
org.springframework.http.RequestEntity<?> requestEntity, java.lang.Class<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> org.springframework.http.ResponseEntity<T> exchange(
org.springframework.http.RequestEntity<?> requestEntity,
org.springframework.core.ParameterizedTypeReference<T> responseType)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T execute(java.lang.String url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor, java.lang.Object... uriVariables)
throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T execute(java.lang.String url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor,
java.util.Map<java.lang.String, ?> uriVariables) throws org.springframework.web.client.RestClientException {
return null;
}
public <T> T execute(java.net.URI url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor)
throws org.springframework.web.client.RestClientException {
return null;
}
protected <T> T doExecute(java.net.URI url, org.springframework.http.HttpMethod method,
org.springframework.web.client.RequestCallback requestCallback,
org.springframework.web.client.ResponseExtractor<T> responseExtractor)
throws org.springframework.web.client.RestClientException {
return null;
}
protected void handleResponse(java.net.URI url, org.springframework.http.HttpMethod method,
org.springframework.http.client.ClientHttpResponse response) throws java.io.IOException {
}
}