hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 00:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Migrate Java code to separate QL repo.

Browse Source
This commit is contained in:
Pavel Avgustinov
2018-08-30 10:48:05 +01:00
parent d957c151a6
commit 846c9d5860
2319 changed files with 134386 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
java/ql/src/Frameworks/JavaEE/EJB/EjbSecurityConfiguration.qhelp Normal file
View File

@@ -0,0 +1,35 @@
<!DOCTYPE qhelp PUBLIC
"-//Semmle//qhelp//EN"
"qhelp.dtd">
<qhelp>
<overview>
<p>
The Enterprise JavaBeans 3.0 core specification, Section 21.1.2, states:
</p>
<blockquote>
<p>
The enterprise bean must not attempt to access or modify the security configuration objects
(Policy, Security, Provider, Signer, and Identity).
</p>
<p>
These functions are reserved for the EJB container. Allowing the enterprise bean to use these functions
could compromise security.
</p>
</blockquote>
</overview>
<references>
<li>
<a href="http://jcp.org/aboutJava/communityprocess/final/jsr220/index.html">
JSR-220 Enterprise JavaBeans 3.0 Final Release</a> (ejbcore),
Section 21.1.2 Programming Restrictions
</li>
</references>
</qhelp>