hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 21:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

org.kohsuke.stapler.model tests

Browse Source
This commit is contained in:
Tony Torralba
2023-03-15 14:36:45 +01:00
parent c5a1905302
commit 3b4980ba2f
11 changed files with 292 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/test/query-tests/security/CWE-918/mad/Test.java
View File

@@ -8,6 +8,7 @@ import javax.servlet.http.HttpServletRequest;
import javafx.scene.web.WebEngine;
import org.apache.commons.jelly.JellyContext;
import org.codehaus.cargo.container.installer.ZipURLInstaller;
import org.kohsuke.stapler.HttpResponses;
public class Test {
@@ -68,4 +69,9 @@ public class Test {
new ZipURLInstaller((URL) source(), "", ""); // $ SSRF
}
public void test(HttpResponses r) {
// "org.kohsuke.stapler;HttpResponses;true;staticResource;(URL);;Argument[0];open-url;ai-generated"
r.staticResource((URL) source()); // $ SSRF
}
}