hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-28 21:03:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Java: Convert unsafe URL opening sinks to CSV format

Browse Source
This commit is contained in:
Tamas Vajk
2021-03-30 09:31:38 +02:00
parent 716568ebd1
commit b9ce1aefc0
2 changed files with 10 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
java/ql/src/semmle/code/java/dataflow/ExternalFlow.qll
View File

@@ -184,7 +184,14 @@ private predicate sourceModelCsv(string row) {
]
}
private predicate sinkModelCsv(string row) { none() }
private predicate sinkModelCsv(string row) {
row =
[
// Open URL
"java.net;URL;false;openConnection;;;Argument[-1];open-url",
"java.net;URL;false;openStream;;;Argument[-1];open-url"
]
}
private predicate summaryModelCsv(string row) {
row =