hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-20 18:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

delete tomcat-embed-core stub, update the ServletGetMethod class

Browse Source
This commit is contained in:
haby0
2021-04-15 17:40:51 +08:00
parent 5d05e4d224
commit 583d0889e2
11 changed files with 1 additions and 421 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll
View File

@@ -21,7 +21,7 @@ abstract class RequestGetMethod extends Method {
/** Override method of `doGet` of `Servlet` subclass. */
private class ServletGetMethod extends RequestGetMethod {
ServletGetMethod() { isServletRequestMethod(this) and m.getName() = "doGet" }
ServletGetMethod() { isServletRequestMethod(this) and this.getName() = "doGet" }
}
/** The method of SpringController class processing `get` request. */

10
java/ql/src/semmle/code/java/frameworks/Servlets.qll
View File

@@ -361,13 +361,3 @@ predicate isDoFilterMethod(Method m) {
m.getParameter(1).getType() instanceof ServletResponse and
m.getParameter(2).getType() instanceof FilterChain
}
/** Holds if `m` is a method of some override of `HttpServlet.doGet`. */
predicate isGetServletMethod(Method m) {
isServletRequestMethod(m) and m.getName() = "doGet"
}
/** The `doGet` method of `HttpServlet`. */
class DoGetServletMethod extends Method {
DoGetServletMethod() { isGetServletMethod(this) }
}