hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-22 23:35:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Test case for modeling io.jsonwebtoken.SigningKeyResolverAdapter

Browse Source
This commit is contained in:
Ed Minnix
2023-04-20 11:47:46 -04:00
parent 3d0147765c
commit a4fa1ec768
2 changed files with 18 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
java/ql/test/library-tests/dataflow/taintsources/JwsSigningKeyResolverAdapter.java Normal file
View File

@@ -0,0 +1,17 @@
import io.jsonwebtoken.Claims;
import io.jsonwebtoken.JwsHeader;
import io.jsonwebtoken.SigningKeyResolverAdapter;
public class JwsSigningKeyResolverAdapter extends SigningKeyResolverAdapter {
private void sink(Object o) {
}
@Override
public byte[] resolveSigningKeyBytes(JwsHeader header, Claims claims) {
final String keyId = header.getKeyId();
String example = "example:" + keyId;
sink(example); // $ hasRemoteTaintFlow
return new byte[0];
}
}

2
java/ql/test/library-tests/dataflow/taintsources/options
View File

@@ -1 +1 @@
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.3.8:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.3.8:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2