Java: refactor QL, move code to libraries

This commit is contained in:
Jami Cogswell
2025-02-20 16:26:46 -05:00
parent 8064e8f1f9
commit 8dfb920e05
5 changed files with 142 additions and 125 deletions

View File

@@ -1,4 +1,5 @@
import java
import semmle.code.java.frameworks.spring.SpringSecurity
import semmle.code.java.security.SpringBootActuatorsQuery
import utils.test.InlineExpectationsTest
@@ -7,7 +8,7 @@ module SpringBootActuatorsTest implements TestSig {
predicate hasActualResult(Location location, string element, string tag, string value) {
tag = "hasExposedSpringBootActuator" and
exists(PermitAllCall permitAllCall | permitAllCall.permitsSpringBootActuators() |
exists(PermitAllCall permitAllCall | permitsSpringBootActuators(permitAllCall) |
permitAllCall.getLocation() = location and
element = permitAllCall.toString() and
value = ""