hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add check for test packages

Browse Source
This commit is contained in:
luchua-bc
2021-02-17 18:04:55 +00:00
parent a183b00166
commit 5e36eedcb6
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/src/experimental/Security/CWE/CWE-489/ServletMain.ql
View File

@@ -41,7 +41,8 @@ class ServletMainMethod extends Method {
this.isPublic() and
this.getNumberOfParameters() = 1 and
this.getParameter(0).getType() instanceof Array and
not this.getDeclaringType().getName().matches("%Test%") // Simple check to exclude test classes to reduce FPs
not this.getDeclaringType().getName().toLowerCase().matches("%test%") and // Simple check to exclude test classes to reduce FPs
not this.getDeclaringType().getPackage().getName().toLowerCase().matches("%test%") // Simple check to exclude classes in test packages to reduce FPs
}
}