Java: Do not derive new write-file sinks.

2026-04-28 02:05:14 +02:00 · 2022-05-29 14:33:19 +02:00
parent ad4d8304ed
commit 48da8dde6f
1 changed files with 2 additions and 1 deletions
--- a/java/ql/src/utils/model-generator/internal/CaptureModelsSpecific.qll
+++ b/java/ql/src/utils/model-generator/internal/CaptureModelsSpecific.qll
@@ -234,5 +234,6 @@ string asInputArgument(DataFlow::Node source) {
 bindingset[kind]
 predicate isRelevantSinkKind(string kind) {
  not kind = "logging" and
-  not kind.matches("regex-use%")
+  not kind.matches("regex-use%") and
+  not kind = "write-file"
 }