hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 11:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

Move JSFRenderer.qll to lib

Browse Source
This commit is contained in:
Chris Smowton
2021-09-14 11:49:01 +01:00
parent 023c533745
commit b7fc068cee
1 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

75
java/ql/src/semmle/code/java/frameworks/javaee/jsf/JSFRenderer.qll
View File

@@ -1,75 +0,0 @@
/** Provides classes and predicates for working with JavaServer Faces renderer. */
import java
private import semmle.code.java.dataflow.ExternalFlow
/**
* The JSF class `FacesContext` for processing HTTP requests.
*/
class FacesContext extends RefType {
FacesContext() {
this.hasQualifiedName(["javax.faces.context", "jakarta.faces.context"], "FacesContext")
}
}
private class ExternalContextSource extends SourceModelCsv {
override predicate row(string row) {
row =
[
"javax.faces.context;ExternalContext;true;getRequestParameterMap;();;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getRequestParameterNames;();;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getRequestParameterValuesMap;();;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getRequestPathInfo;();;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getResource;(String);;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getResourceAsStream;(String);;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getResourcePaths;(String);;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getRequestCookieMap;();;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getRequestHeaderMap;();;ReturnValue;remote",
"javax.faces.context;ExternalContext;true;getRequestHeaderValuesMap;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestParameterMap;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestParameterNames;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestParameterValuesMap;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestPathInfo;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getResource;(String);;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getResourceAsStream;(String);;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getResourcePaths;(String);;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestCookieMap;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestHeaderMap;();;ReturnValue;remote",
"jakarta.faces.context;ExternalContext;true;getRequestHeaderValuesMap;();;ReturnValue;remote"
]
}
}
/**
* The method `getResponseWriter()` declared in JSF `ExternalContext`.
*/
class FacesGetResponseWriterMethod extends Method {
FacesGetResponseWriterMethod() {
getDeclaringType() instanceof FacesContext and
hasName("getResponseWriter") and
getNumberOfParameters() = 0
}
}
/**
* The method `getResponseStream()` declared in JSF `ExternalContext`.
*/
class FacesGetResponseStreamMethod extends Method {
FacesGetResponseStreamMethod() {
getDeclaringType() instanceof FacesContext and
hasName("getResponseStream") and
getNumberOfParameters() = 0
}
}
private class ExternalContextXssSink extends SinkModelCsv {
override predicate row(string row) {
row =
[
"javax.faces.context;ResponseWriter;true;write;;;Argument[0];xss",
"javax.faces.context;ResponseStream;true;write;;;Argument[0];xss",
"jakarta.faces.context;ResponseWriter;true;write;;;Argument[0];xss",
"jakarta.faces.context;ResponseStream;true;write;;;Argument[0];xss"
]
}
}