hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add models for getLanguage, getMediaType

Browse Source
This commit is contained in:
Chris Smowton
2021-08-17 14:44:27 +01:00
parent 5e7a3ca2e6
commit 451a46bf0e
3 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/frameworks/JaxWS.qll
View File

@@ -977,7 +977,7 @@ private class ContainerRequestContextModel extends SourceModelCsv {
["javax", "jakarta"] + ".ws.rs.container;ContainerRequestContext;true;" +
[
"getAcceptableLanguages", "getAcceptableMediaTypes", "getCookies", "getEntityStream",
"getHeaders", "getHeaderString", "getUriInfo"
"getHeaders", "getHeaderString", "getLanguage", "getMediaType", "getUriInfo"
] + ";;;ReturnValue;remote"
}
}

2
java/ql/test/library-tests/frameworks/JaxWs/JakartaContainerRequestContextSources.java
View File

@@ -12,6 +12,8 @@ public class JakartaContainerRequestContextSources {
sink(buf); // $ hasTaintFlow
sink(context.getHeaders().getFirst("someKey")); // $ hasTaintFlow
sink(context.getHeaderString("someKey")); // $ hasValueFlow
sink(context.getLanguage()); // $ hasValueFlow
sink(context.getMediaType().getType()); // $ hasTaintFlow
sink(context.getUriInfo().getPath()); // $ hasTaintFlow
}
}

2
java/ql/test/library-tests/frameworks/JaxWs/JaxRsContainerRequestContextSources.java
View File

@@ -12,6 +12,8 @@ public class JaxRsContainerRequestContextSources {
sink(buf); // $ hasTaintFlow
sink(context.getHeaders().getFirst("someKey")); // $ hasTaintFlow
sink(context.getHeaderString("someKey")); // $ hasValueFlow
sink(context.getLanguage()); // $ hasValueFlow
sink(context.getMediaType().getType()); // $ hasTaintFlow
sink(context.getUriInfo().getPath()); // $ hasTaintFlow
}
}