hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 12:45:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Model the Stapler framework

Browse Source
This commit is contained in:
Tony Torralba
2023-05-23 15:21:50 +02:00
parent 182513a981
commit 5e3d9d8136
19 changed files with 340 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
java/ql/test/library-tests/dataflow/taintsources/Stapler.java Normal file
View File

@@ -0,0 +1,14 @@
import org.kohsuke.stapler.InjectedParameter;
public class Stapler {
@InjectedParameter
private @interface MyInjectedParameter {
}
private static void sink(Object o) {}
public static void test(@MyInjectedParameter String src) {
sink(src); // $ hasRemoteValueFlow
}
}

2
java/ql/test/library-tests/dataflow/taintsources/options
View File

@@ -1 +1 @@
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.3.8:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2:${testdir}/../../../stubs/jenkins
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.3.8:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2:${testdir}/../../../stubs/jenkins:${testdir}/../../../stubs/stapler-1.263