hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 03:36:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

include suggestions from review.

Browse Source
This commit is contained in:
Porcupiney Hairs
2020-11-13 17:55:56 +05:30
parent eb6d6113d9
commit 4b25532b9f
17 changed files with 40 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/Security/CWE/CWE-319/HttpsUrls.ql
View File

@@ -11,7 +11,7 @@
import java
import semmle.code.java.dataflow.TaintTracking
import semmle.code.java.frameworks.javase.URL
import semmle.code.java.frameworks.Networking
import DataFlow::PathGraph
class HTTPString extends StringLiteral {
@@ -52,7 +52,7 @@ class HTTPStringToURLOpenMethodFlowConfig extends TaintTracking::Configuration {
}
override predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
exists(URLConstructor u |
exists(UrlConstructor u |
node1.asExpr() = u.protocolArg() and
node2.asExpr() = u
)