hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Review feeback for OpenStream

Browse Source
This commit is contained in:
Peter Stöckli
2020-03-27 17:06:58 +01:00
parent 5e62a6bebe
commit 3de00443ff
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/src/experimental/Security/CWE/CWE-036/OpenStream.ql
View File

@@ -16,11 +16,9 @@ class URLConstructor extends ClassInstanceExpr {
Expr stringArg() {
// Query only in URL's that were constructed by calling the single parameter string constructor.
if
this.getConstructor().getNumberOfParameters() = 1 and
this.getConstructor().getParameter(0).getType().getName() = "String"
then result = this.getArgument(0)
else none()
this.getConstructor().getNumberOfParameters() = 1 and
this.getConstructor().getParameter(0).getType() instanceof TypeString
and result = this.getArgument(0)
}
}