hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add models for Spring validation.Errors

Browse Source
This commit is contained in:
Sauyon Lee
2021-04-02 01:13:41 -07:00
parent fe2b73ed72
commit 534ab86900
4 changed files with 97 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/src/semmle/code/java/frameworks/spring/Spring.qll
View File

@@ -12,6 +12,7 @@ import semmle.code.java.frameworks.spring.SpringConstructorArg
import semmle.code.java.frameworks.spring.SpringController
import semmle.code.java.frameworks.spring.SpringDescription
import semmle.code.java.frameworks.spring.SpringEntry
import semmle.code.java.frameworks.spring.SpringErrors
import semmle.code.java.frameworks.spring.SpringFlex
import semmle.code.java.frameworks.spring.SpringIdRef
import semmle.code.java.frameworks.spring.SpringImport

22
java/ql/src/semmle/code/java/frameworks/spring/SpringErrors.qll Normal file
View File

@@ -0,0 +1,22 @@
/** Definitions of flow steps through utility methods of `org.springframework.validation.Errors`. */
import java
private import semmle.code.java.dataflow.ExternalFlow
private class SpringErrorModel extends SummaryModelCsv {
override predicate row(string row) {
row =
[
"org.springframework.validation;Errors;true;addAllErrors;;;Argument[0];Argument[-1];taint",
"org.springframework.validation;Errors;true;getAllErrors;;;Argument[-1];ReturnValue;taint",
"org.springframework.validation;Errors;true;getFieldError;;;Argument[-1];ReturnValue;taint",
"org.springframework.validation;Errors;true;getFieldErrors;;;Argument[-1];ReturnValue;taint",
"org.springframework.validation;Errors;true;getGlobalError;;;Argument[-1];ReturnValue;taint",
"org.springframework.validation;Errors;true;getGlobalErrors;;;Argument[-1];ReturnValue;taint",
"org.springframework.validation;Errors;true;reject;;;Argument[0..2];Argument[-1];taint",
"org.springframework.validation;Errors;true;rejectValue;;;Argument[1..3];Argument[-1];taint",
"org.springframework.validation;Errors;true;reject;;;Argument[0..2];Argument[-1];taint",
"org.springframework.validation;Errors;true;rejectValue;;;Argument[1..3];Argument[-1];taint"
]
}
}