Java: Cleanup threat model taxanomy to align with the EDR.

2026-03-05 07:06:47 +01:00 · 2023-09-28 10:52:05 +02:00
parent 5c700afa27
commit 5b949b19f7
7 changed files with 10 additions and 13 deletions
--- a/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
+++ b/java/ql/lib/semmle/code/java/dataflow/FlowSources.qll
@@ -259,7 +259,7 @@ private class CliInput extends LocalUserInput {
    exists(Field f | this.asExpr() = f.getAnAccess() | f instanceof SystemIn)
  }

-  override string getThreatModel() { result = "cli" }
+  override string getThreatModel() { result = "commandargs" }
 }

 /**