hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ratpack: Drop support for flatMap like methods

Browse Source
This commit is contained in:
Jonathan Leitschuh
2021-05-18 12:33:32 -04:00
parent af90b00e63
commit 6497a61c1d
2 changed files with 66 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
java/ql/test/library-tests/frameworks/ratpack/resources/Resource.java
View File

@@ -5,6 +5,7 @@ import ratpack.core.form.UploadedFile;
import ratpack.core.parse.Parse;
import ratpack.exec.Promise;
import ratpack.func.Action;
import ratpack.func.Function;
import java.io.OutputStream;
class Resource {
@@ -67,7 +68,7 @@ class Resource {
sink(Promise.value(tainted)); //$hasTaintFlow
Promise
.value(tainted)
.flatMap(a -> Promise.value(a))
.map(a -> a)
.then(this::sink); //$hasTaintFlow
}
@@ -180,33 +181,51 @@ class Resource {
.then(value -> {
sink(value); //$hasTaintFlow
});
Promise
.value("potato")
.flatMapError(RuntimeException.class, exception -> {
return Promise.value(taint());
})
.then(value -> {
sink(value); //$hasTaintFlow
});
// Waiting for support for lambda data flow
// Promise
// .value("potato")
// .flatMapError(RuntimeException.class, exception -> {
// return Promise.value(taint());
// })
// .then(value -> {
// sink(value); //$hasTaintFlow
// });
}
void test9() {
String tainted = taint();
Promise
.value(tainted)
.apply(Resource::identity)
.map(Resource::identity)
.then(value -> {
sink(value); //$hasTaintFlow
});
Promise
.value("potato")
.apply(Resource::identity)
.map(Resource::identity)
.then(value -> {
sink(value); // no taints flow
});
}
public static Promise<String> identity(Promise<String> input) {
return input.map(i -> i);
public static String identity(String input) {
return input;
}
void test10() {
String tainted = taint();
Promise
.value(tainted)
.map(a -> a)
.then(value -> {
sink(value); //$hasTaintFlow
});
Promise
.value("potato")
.map(a -> a)
.then(value -> {
sink(value); // no taints flow
});
}
}