Java: Add missing flow step for ThreadLocal.initialValue.

2026-04-26 01:05:15 +02:00 · 2023-09-22 13:33:45 +02:00
parent 9f905497a5
commit 8ee1f8ae69
3 changed files with 42 additions and 1 deletions
--- a/java/ql/test/query-tests/security/CWE-611/DocumentBuilderTests.java
+++ b/java/ql/test/query-tests/security/CWE-611/DocumentBuilderTests.java
@@ -129,7 +129,7 @@ class DocumentBuilderTests {

  public void disableExternalEntities2(Socket sock) throws Exception {
    DocumentBuilder builder = XML_DOCUMENT_BUILDER.get();
-    builder.parse(sock.getInputStream()); // $ SPURIOUS: hasTaintFlow
+    builder.parse(sock.getInputStream()); // safe
  }

 }