hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-22 23:35:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add credentials sinks from SensitiveApi

Browse Source
This commit is contained in:
Ed Minnix
2023-09-12 23:13:33 -04:00
parent 057a74d914
commit 646254c9b2
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll
View File

@@ -3,6 +3,7 @@
import java
private import semmle.code.java.frameworks.Servlets
private import semmle.code.java.security.SensitiveActions
private import semmle.code.java.security.SensitiveApi
private import semmle.code.java.dataflow.TaintTracking
private import semmle.code.java.dataflow.ExternalFlow
private import semmle.code.java.security.RandomQuery
@@ -66,6 +67,8 @@ private class CryptographicSink extends WeakRandomnessSink {
CryptographicSink() { sinkNode(this, "crypto-parameter") }
}
private class CredentialsSink extends WeakRandomnessSink instanceof CredentialsSinkNode { }
/**
* Holds if there is a method access which converts `bytes` to the string `str`.
*/