mirror of
https://github.com/github/codeql.git
synced 2026-04-25 00:35:20 +02:00
Java: update open/jdbc-url sink kinds to request-forgery
This commit is contained in:
@@ -89,7 +89,7 @@ class GetVirtualFileChildMethod extends Method {
|
||||
/** An argument to `getResource()` or `getResourceAsStream()`. */
|
||||
private class GetResourceSink extends UnsafeUrlForwardSink {
|
||||
GetResourceSink() {
|
||||
sinkNode(this, "open-url")
|
||||
sinkNode(this, "request-forgery")
|
||||
or
|
||||
sinkNode(this, "get-resource")
|
||||
or
|
||||
|
||||
Reference in New Issue
Block a user