hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Refactor UnsafeContentUriResolution.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2023-03-15 10:32:58 +01:00
parent 4b814ec71c
commit b3b5c2c767
3 changed files with 29 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
java/ql/src/Security/CWE/CWE-441/UnsafeContentUriResolution.ql
View File

@@ -14,10 +14,10 @@
import java
import semmle.code.java.security.UnsafeContentUriResolutionQuery
import DataFlow::PathGraph
import UnsafeContentResolutionFlow::PathGraph
from DataFlow::PathNode src, DataFlow::PathNode sink
where any(UnsafeContentResolutionConf c).hasFlowPath(src, sink)
from UnsafeContentResolutionFlow::PathNode src, UnsafeContentResolutionFlow::PathNode sink
where UnsafeContentResolutionFlow::hasFlowPath(src, sink)
select sink.getNode(), src, sink,
"This ContentResolver method that resolves a URI depends on a $@.", src.getNode(),
"user-provided value"