hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-18 19:31:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6393 from luchua-bc/java/xss-jsf

Browse Source 
Java: CWE-079 Query to detect XSS with JavaServer Faces (JSF)
This commit is contained in:
Chris Smowton
2021-09-14 15:15:56 +01:00
committed by GitHub
parent 26eafcb55a a1ad1ddc10
commit 6cff0d0376
15 changed files with 2203 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/src/Security/CWE/CWE-209/StackTraceExposure.ql
View File

@@ -36,7 +36,9 @@ class ServletWriterSourceToPrintStackTraceMethodFlowConfig extends TaintTracking
this = "StackTraceExposure::ServletWriterSourceToPrintStackTraceMethodFlowConfig"
}
override predicate isSource(DataFlow::Node src) { src.asExpr() instanceof ServletWriterSource }
override predicate isSource(DataFlow::Node src) {
src.asExpr() instanceof XssVulnerableWriterSource
}
override predicate isSink(DataFlow::Node sink) {
exists(MethodAccess ma |