Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack

Java/Dataflow: Add new light-weight data flow api and use it in XmlParsers

java/ql/test/query-tests/security/CWE-611/DocumentBuilderTests.java

@@ -129,7 +129,7 @@ class DocumentBuilderTests {
 
   public void disableExternalEntities2(Socket sock) throws Exception {
     DocumentBuilder builder = XML_DOCUMENT_BUILDER.get();
-    builder.parse(sock.getInputStream()); // safe
+    builder.parse(sock.getInputStream()); // $ SPURIOUS: hasTaintFlow
   }
 
 }