hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-01 13:23:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Java: Don't use default dataflow in libs imported by default.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2019-08-16 13:27:53 +02:00
parent 01fd161c03
commit 9e4f2f8594
2 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/src/semmle/code/java/frameworks/google/GoogleHttpClientApi.qll
View File

@@ -1,6 +1,7 @@
import java
import semmle.code.java.Serializability
import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.DataFlow5
/** The method `parseAs` in `com.google.api.client.http.HttpResponse`. */
private class ParseAsMethod extends Method {
@@ -10,7 +11,7 @@ private class ParseAsMethod extends Method {
}
}
private class TypeLiteralToParseAsFlowConfiguration extends DataFlow::Configuration {
private class TypeLiteralToParseAsFlowConfiguration extends DataFlow5::Configuration {
TypeLiteralToParseAsFlowConfiguration() {
this = "GoogleHttpClientApi::TypeLiteralToParseAsFlowConfiguration"
}

3
java/ql/src/semmle/code/java/frameworks/jackson/JacksonSerializability.qll
View File

@@ -7,6 +7,7 @@ import java
import semmle.code.java.Serializability
import semmle.code.java.Reflection
import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.DataFlow5
class JacksonJSONIgnoreAnnotation extends NonReflectiveAnnotation {
JacksonJSONIgnoreAnnotation() {
@@ -52,7 +53,7 @@ library class FieldReferencedJacksonSerializableType extends JacksonSerializable
abstract class JacksonDeserializableType extends Type { }
private class TypeLiteralToJacksonDatabindFlowConfiguration extends DataFlow::Configuration {
private class TypeLiteralToJacksonDatabindFlowConfiguration extends DataFlow5::Configuration {
TypeLiteralToJacksonDatabindFlowConfiguration() {
this = "TypeLiteralToJacksonDatabindFlowConfiguration"
}