hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-23 15:55:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source
This commit is contained in:
Tony Torralba
2023-10-17 11:51:55 +02:00
committed by GitHub
parent e5b17af9b5
commit 62a9ffd277
3 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
java/ql/lib/ext/jakarta.ws.rs.core.model.yml
View File

@@ -3,7 +3,6 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
- ["jakarta.ws.rs.core", "Response", False, "created", "(URI)", "", "Argument[0]", "request-forgery", "ai-manual"] # it's unclear whether this does some sanitization (in which case it's likely a negative)
- ["jakarta.ws.rs.core", "Response", True, "seeOther", "", "", "Argument[0]", "url-redirection", "manual"]
- ["jakarta.ws.rs.core", "Response", True, "temporaryRedirect", "", "", "Argument[0]", "url-redirection", "manual"]
- addsTo:

1
java/ql/lib/ext/javax.script.model.yml
View File

@@ -3,5 +3,4 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
# suggested label is not supported: - ["javax.script", "Compilable", True, "compile", "(String)", "", "Argument[0]", "command-injection", "ai-manual"]
- ["javax.script", "CompiledScript", False, "eval", "", "", "Argument[this]", "mvel-injection", "manual"]

2
java/ql/lib/ext/org.apache.http.client.utils.model.yml
View File

@@ -3,7 +3,7 @@ extensions:
pack: codeql/java-all
extensible: summaryModel
data:
- ["org.apache.http.client.utils", "URIBuilder", True, "setPort", "(int)", "", "Argument[this]", "ReturnValue", "taint", "ai-manual"] # actually a value step
- ["org.apache.http.client.utils", "URIBuilder", True, "setPort", "(int)", "", "Argument[this]", "ReturnValue", "value", "ai-manual"]
- ["org.apache.http.client.utils", "URIBuilder", True, "URIBuilder", "(String)", "", "Argument[0]", "Argument[this]", "taint", "ai-manual"]
- ["org.apache.http.client.utils", "URIBuilder", True, "URIBuilder", "(URI)", "", "Argument[0]", "Argument[this]", "taint", "ai-manual"]
- ["org.apache.http.client.utils", "URIBuilder", True, "URIBuilder", "(URI,Charset)", "", "Argument[0]", "Argument[this]", "taint", "hq-manual"]