hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-05 15:16:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Replace servlet source node with RemoteFlowSource

Browse Source
This commit is contained in:
Ed Minnix
2023-07-28 15:48:35 -04:00
parent 929090a847
commit a3a4c31911
1 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll
View File

@@ -12,11 +12,8 @@ private import semmle.code.java.frameworks.owasp.Esapi
*/
abstract class TrustBoundaryViolationSource extends DataFlow::Node { }
/**
* A node representing a servlet request.
*/
private class ServletRequestSource extends TrustBoundaryViolationSource {
ServletRequestSource() { this.asExpr().getType() instanceof HttpServletRequest }
private class RemoteSource extends TrustBoundaryViolationSource {
RemoteSource() { this instanceof RemoteFlowSource }
}
/**