hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-14 11:19:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add @Pattern annotation test case and javax-validation-constraints stub

Browse Source 
Adds a dedicated test verifying that fields annotated with
@javax.validation.constraints.Pattern are recognized as sanitized
by RegexpCheckBarrier, in addition to the existing String.matches()
guard test.
This commit is contained in:
MarkLee131
2026-04-04 22:04:05 +08:00
parent 258a53e146
commit b49c6dcbd4
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/test/query-tests/security/CWE-501/TrustBoundaryViolations.java
View File

@@ -38,4 +38,12 @@ public class TrustBoundaryViolations extends HttpServlet {
request.getSession().setAttribute("input4", input4);
}
}
@javax.validation.constraints.Pattern(regexp = "^[a-zA-Z0-9]+$")
String validatedField;
public void doPost(HttpServletRequest request, HttpServletResponse response) {
// GOOD: The field is constrained by a @Pattern annotation.
request.getSession().setAttribute("validated", validatedField);
}
}

2
java/ql/test/query-tests/security/CWE-501/options
View File

@@ -1 +1 @@
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/esapi-2.0.1:${testdir}/../../../stubs/javax-servlet-2.5
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/esapi-2.0.1:${testdir}/../../../stubs/javax-servlet-2.5:${testdir}/../../../stubs/javax-validation-constraints