hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 13:45:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed but errors still

Browse Source
This commit is contained in:
Kevin Stubbings
2024-09-25 21:46:52 +00:00
parent a8efb92b9b
commit 6445074fea
58 changed files with 55 additions and 1209 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
java/ql/test/library-tests/dataflow/taintsources/FileUpload.java Normal file
View File

@@ -0,0 +1,39 @@
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.Part;
import org.apache.commons.fileupload.FileItem;
import org.apache.commons.fileupload.FileItemStream;
public class FileUpload {
private HttpServletRequest request;
private HttpServletResponse response;
private Part filePart;
private FileItem fileItem;
private FileItemStream fileItemStream;
private static void sink(Object o) {}
public void test() throws Exception {
sink(filePart.getContentType()); // $ hasRemoteValueFlow
sink(filePart.getHeader("test")); // $ hasRemoteValueFlow
sink(filePart.getInputStream()); // $ hasRemoteValueFlow
sink(filePart.getHeaders("test")); // $ hasRemoteValueFlow
sink(filePart.getHeaderNames()); // $ hasRemoteValueFlow
sink(filePart.getSubmittedFileName()); // $ hasRemoteValueFlow
sink(filePart.getName()); // $ hasRemoteValueFlow
sink(fileItem.getName()); // $ hasRemoteValueFlow
sink(fileItem.get()); // $ hasRemoteValueFlow
sink(fileItem.getString()); // $ hasRemoteValueFlow
sink(fileItem.getContentType()); // $ hasRemoteValueFlow
sink(fileItem.getName()); // $ hasRemoteValueFlow
//These result in a compiler error when uncommented
//sink(fileItemStream) // $ hasRemoteValueFlow
//sink(fileItemStream.getFieldName()) // $ hasRemoteValueFlow
//sink(fileItemStream.getName()) // $ hasRemoteValueFlow
//sink(fileItemStream.openStream()) // $ hasRemoteValueFlow
}
}