hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Revert erroneous refactoring in header splitting sink base class

Browse Source
This commit is contained in:
Tamas Vajk
2021-04-22 11:20:39 +02:00
parent 9b1c54e81b
commit 6c78a247f2
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/src/semmle/code/java/security/ResponseSplitting.qll
View File

@@ -8,8 +8,10 @@ import semmle.code.java.frameworks.JaxWS
private import semmle.code.java.dataflow.ExternalFlow
/** A sink that is vulnerable to an HTTP header splitting attack. */
class HeaderSplittingSink extends DataFlow::Node {
HeaderSplittingSink() { sinkNode(this, "header-splitting") }
abstract class HeaderSplittingSink extends DataFlow::Node { }
private class DefaultHeaderSplittingSink extends HeaderSplittingSink {
DefaultHeaderSplittingSink() { sinkNode(this, "header-splitting") }
}
private class HeaderSplittingSinkModel extends SinkModelCsv {