hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 18:25:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Switch qualified name to available CollectionType

Browse Source
This commit is contained in:
Francis Alexander
2021-02-17 16:01:27 +05:30
parent 520ba47293
commit 58971f9f4e
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
java/ql/src/Security/CWE/CWE-346/UnvalidatedCors.ql
View File

@@ -31,10 +31,7 @@ private predicate setsAllowCredentials(MethodAccess header) {
class CorsProbableCheckAccess extends MethodAccess {
CorsProbableCheckAccess() {
getMethod().hasName("contains") and
getMethod()
.getDeclaringType()
.getASourceSupertype*()
.hasQualifiedName("java.util", "Collection")
getMethod().getDeclaringType().getASourceSupertype*() instanceof CollectionType
or
getMethod().hasName("equals") and
getQualifier().getType() instanceof TypeString