hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Refactor HardcodedCredentialsSourceCall

Browse Source
This commit is contained in:
Ed Minnix
2023-04-03 14:01:20 -04:00
parent 15d5ad7a66
commit 735a7383c6
3 changed files with 47 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/src/Security/CWE/CWE-798/HardcodedCredentialsSourceCall.ql
View File

@@ -12,11 +12,11 @@
import java
import semmle.code.java.security.HardcodedCredentialsSourceCallQuery
import DataFlow::PathGraph
import HardcodedCredentialSourceCallFlow::PathGraph
from
DataFlow::PathNode source, DataFlow::PathNode sink,
HardcodedCredentialSourceCallConfiguration conf
where conf.hasFlowPath(source, sink)
HardcodedCredentialSourceCallFlow::PathNode source,
HardcodedCredentialSourceCallFlow::PathNode sink
where HardcodedCredentialSourceCallFlow::flowPath(source, sink)
select source.getNode(), source, sink, "Hard-coded value flows to $@.", sink.getNode(),
"sensitive call"