Merge branch 'new_deser_sink' of https://github.com/pwntester/ql into new_deser_sink

2026-04-30 11:15:13 +02:00 · 2020-11-04 10:51:07 +01:00
parent 436563d914 6f78b725e6
commit b284141a16
1 changed files with 1 additions and 1 deletions
--- a/java/ql/src/semmle/code/java/frameworks/SnakeYaml.qll
+++ b/java/ql/src/semmle/code/java/frameworks/SnakeYaml.qll
@@ -71,7 +71,7 @@ private class SnakeYamlParse extends MethodAccess {
  SnakeYamlParse() {
    exists(Method m |
      m.getDeclaringType() instanceof Yaml and
-      (m.hasName("compose") or m.hasName("composeAll") or m.hasName("load") or m.hasName("loadAll") or m.hasName("loadAs") or m.hasName("parse")) and
+      m.hasName(["compose", "composeAll", "load", "loadAll", "loadAs", "parse"]) and
      m = this.getMethod()
    )
  }