hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Added Accessor sink for MVEL injections

Browse Source
This commit is contained in:
Artem Smotrakov
2020-04-24 23:49:19 +02:00
parent 12e0234d40
commit 6a6c805048
6 changed files with 37 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
java/ql/test/stubs/mvel2-2.4.7/org/mvel2/compiler/Accessor.java Normal file
View File

@@ -0,0 +1,7 @@
package org.mvel2.compiler;
import org.mvel2.integration.VariableResolverFactory;
public interface Accessor {
public Object getValue(Object ctx, Object elCtx, VariableResolverFactory factory);
}

1
java/ql/test/stubs/mvel2-2.4.7/org/mvel2/compiler/CompiledExpression.java
View File

@@ -5,4 +5,5 @@ import org.mvel2.integration.VariableResolverFactory;
public class CompiledExpression implements ExecutableStatement {
public Object getDirectValue(Object staticContext, VariableResolverFactory factory) { return null; }
public Object getValue(Object staticContext, VariableResolverFactory factory) { return null; }
public Object getValue(Object ctx, Object elCtx, VariableResolverFactory factory) { return null; }
}

2
java/ql/test/stubs/mvel2-2.4.7/org/mvel2/compiler/ExecutableStatement.java
View File

@@ -2,6 +2,6 @@ package org.mvel2.compiler;
import org.mvel2.integration.VariableResolverFactory;
public interface ExecutableStatement {
public interface ExecutableStatement extends Accessor {
public Object getValue(Object staticContext, VariableResolverFactory factory);
}