[DIFF-INFORMED] Java: SensitiveLogging

https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-532/SensitiveInfoLog.ql#L20
2026-03-01 21:34:50 +01:00 · 2025-07-16 15:48:19 +02:00
parent bc0b383595
commit 45b627df1d
1 changed files with 2 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
@@ -53,6 +53,8 @@ module SensitiveLoggerConfig implements DataFlow::ConfigSig {
  }

  predicate isBarrierIn(DataFlow::Node node) { isSource(node) }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }

 module SensitiveLoggerFlow = TaintTracking::Global<SensitiveLoggerConfig>;