Java: Change RemoteUserInput to private instead of removing.

This commit is contained in:
Anders Schack-Mulligen
2020-11-30 13:40:53 +01:00
parent b192f6dfe0
commit 88e0759365

View File

@@ -204,6 +204,13 @@ private class BeanValidationSource extends RemoteFlowSource {
/** Class for `tainted` user input. */
abstract class UserInput extends DataFlow::Node { }
/**
* Input that may be controlled by a remote user.
*/
private class RemoteUserInput extends UserInput {
RemoteUserInput() { this instanceof RemoteFlowSource }
}
/** A node with input that may be controlled by a local user. */
abstract class LocalUserInput extends UserInput { }