Whitelist variable name tokenImage

2026-02-24 02:43:40 +01:00 · 2024-03-23 21:33:02 +00:00
parent 63a04c056a
commit 4832dc51ed
1 changed files with 2 additions and 1 deletions
--- a/java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
@@ -12,7 +12,8 @@ class VariableWithSensitiveName extends Variable {
  VariableWithSensitiveName() {
    exists(string name | name = this.getName() |
      name.regexpMatch(getCommonSensitiveInfoRegex()) and
-      not name.regexpMatch("(?i).*null.*")
+      not name.regexpMatch("(?i).*null.*") and
+      not name.matches("tokenImage") // appears in parser code generated by JavaCC
    )
  }
 }