mirror of
https://github.com/github/codeql.git
synced 2025-12-22 03:36:30 +01:00
Autoformat.
This commit is contained in:
@@ -19,8 +19,7 @@ import DataFlow::PathGraph
|
||||
*/
|
||||
class ELMessageInterpolatorType extends RefType {
|
||||
ELMessageInterpolatorType() {
|
||||
this
|
||||
.getASourceSupertype*()
|
||||
this.getASourceSupertype*()
|
||||
.hasQualifiedName("org.hibernate.validator.messageinterpolation",
|
||||
["ResourceBundleMessageInterpolator", "ValueFormatterMessageInterpolator"])
|
||||
}
|
||||
@@ -38,9 +37,8 @@ class SetMessageInterpolatorCall extends MethodAccess {
|
||||
t.hasQualifiedName("javax.validation", ["Configuration", "ValidatorContext"]) and
|
||||
m.getName() = "messageInterpolator"
|
||||
or
|
||||
t
|
||||
.hasQualifiedName("org.springframework.validation.beanvalidation",
|
||||
["CustomValidatorBean", "LocalValidatorFactoryBean"]) and
|
||||
t.hasQualifiedName("org.springframework.validation.beanvalidation",
|
||||
["CustomValidatorBean", "LocalValidatorFactoryBean"]) and
|
||||
m.getName() = "setMessageInterpolator"
|
||||
)
|
||||
)
|
||||
@@ -58,8 +56,7 @@ class SetMessageInterpolatorCall extends MethodAccess {
|
||||
*/
|
||||
class BuildConstraintViolationWithTemplateMethod extends Method {
|
||||
BuildConstraintViolationWithTemplateMethod() {
|
||||
this
|
||||
.getDeclaringType()
|
||||
this.getDeclaringType()
|
||||
.getASupertype*()
|
||||
.hasQualifiedName("javax.validation", "ConstraintValidatorContext") and
|
||||
this.hasName("buildConstraintViolationWithTemplate")
|
||||
|
||||
@@ -15,8 +15,7 @@ import java
|
||||
from MethodAccess call
|
||||
where
|
||||
call.getMethod().hasName("disable") and
|
||||
call
|
||||
.getReceiverType()
|
||||
call.getReceiverType()
|
||||
.hasQualifiedName("org.springframework.security.config.annotation.web.configurers",
|
||||
"CsrfConfigurer<HttpSecurity>")
|
||||
select call, "CSRF vulnerability due to protection being disabled."
|
||||
|
||||
Reference in New Issue
Block a user