diff --git a/java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll b/java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll index 752709a0b1c..66ed90aa5f9 100644 --- a/java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll +++ b/java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll @@ -57,7 +57,9 @@ abstract class WeakRandomnessSink extends DataFlow::Node { } private class CookieSink extends WeakRandomnessSink { CookieSink() { this.getType() instanceof TypeCookie and - exists(MethodAccess ma | ma.getMethod().hasName("addCookie") | + exists(MethodAccess ma | + ma.getMethod().hasQualifiedName("javax.servlet.http", "HttpServletResponse", "addCookie") + | ma.getArgument(0) = this.asExpr() ) }