hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10006 from aschackmull/java/sensitive-log-dedup

Browse Source 
Java: Remove SensitiveLoggingQuery results that flow through a source.
This commit is contained in:
Anders Schack-Mulligen
2022-08-11 09:26:33 +02:00
committed by GitHub
parent ced083be61 ecc15a1f95
commit 87461fece4
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
View File

@@ -28,4 +28,6 @@ class SensitiveLoggerConfiguration extends TaintTracking::Configuration {
override predicate isSanitizer(DataFlow::Node sanitizer) {
sanitizer.asExpr() instanceof LiveLiteral
}
override predicate isSanitizerIn(Node node) { isSource(node) }
}

4
java/ql/src/change-notes/2022-08-10-sensitive-log-dedup.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: majorAnalysis
---
* The query `java/sensitive-log` has been improved to no longer report results that are effectively duplicates due to one source flowing to another source.