Add more sources

2025-12-24 12:46:34 +01:00 · 2023-10-11 16:55:51 -04:00
parent b8b2de2f3c
commit a1e9564cc5
1 changed files with 3 additions and 1 deletions
--- a/java/ql/lib/semmle/code/java/security/RandomDataSource.qll
+++ b/java/ql/lib/semmle/code/java/security/RandomDataSource.qll
@@ -160,7 +160,9 @@ class ApacheCommonsRandomStringSource extends RandomDataSource {
  ApacheCommonsRandomStringSource() {
    exists(Method m | m = this.getMethod() |
      m.getName().matches("random%") and
-      m.getDeclaringType().hasQualifiedName("org.apache.commons.lang3", "RandomStringUtils")
+      m.getDeclaringType()
+          .hasQualifiedName(["org.apache.commons.lang3", "org.apache.commons.lang"],
+            "RandomStringUtils")
    )
  }