Java: Use MaD in log injection test

This commit is contained in:
Tom Hvitved
2025-07-08 10:25:58 +02:00
parent e5b4a15e35
commit 6fdec47e83
3 changed files with 8 additions and 7 deletions

View File

@@ -0,0 +1,6 @@
extensions:
- addsTo:
pack: codeql/java-all
extensible: sourceModel
data:
- ["loginjection", "LogInjectionTest", False, "source", "()", "", "ReturnValue", "remote", "manual"]

View File

@@ -1,3 +1,5 @@
package loginjection;
import java.util.ResourceBundle;
import java.util.logging.LogRecord;
import java.util.regex.Pattern;

View File

@@ -1,11 +1,4 @@
import java
import semmle.code.java.security.LogInjectionQuery
import utils.test.InlineFlowTest
private class TestSource extends RemoteFlowSource {
TestSource() { this.asExpr().(MethodCall).getMethod().hasName("source") }
override string getSourceType() { result = "test source" }
}
import TaintFlowTest<LogInjectionConfig>