mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
Java: Use MaD in log injection test
This commit is contained in:
@@ -0,0 +1,6 @@
|
||||
extensions:
|
||||
- addsTo:
|
||||
pack: codeql/java-all
|
||||
extensible: sourceModel
|
||||
data:
|
||||
- ["loginjection", "LogInjectionTest", False, "source", "()", "", "ReturnValue", "remote", "manual"]
|
||||
@@ -1,3 +1,5 @@
|
||||
package loginjection;
|
||||
|
||||
import java.util.ResourceBundle;
|
||||
import java.util.logging.LogRecord;
|
||||
import java.util.regex.Pattern;
|
||||
|
||||
@@ -1,11 +1,4 @@
|
||||
import java
|
||||
import semmle.code.java.security.LogInjectionQuery
|
||||
import utils.test.InlineFlowTest
|
||||
|
||||
private class TestSource extends RemoteFlowSource {
|
||||
TestSource() { this.asExpr().(MethodCall).getMethod().hasName("source") }
|
||||
|
||||
override string getSourceType() { result = "test source" }
|
||||
}
|
||||
|
||||
import TaintFlowTest<LogInjectionConfig>
|
||||
|
||||
Reference in New Issue
Block a user