Merge pull request #14012 from knewbury01/knewbury01/add-sanitizer-command-query

Java: add sanitizer to command injection query

java/ql/lib/change-notes/2023-08-21-java-command-injection-sanitizer.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Added new sanitizer to Java command injection model

java/ql/lib/semmle/code/java/security/CommandLineQuery.qll

@@ -42,6 +42,8 @@ private class DefaultCommandInjectionSanitizer extends CommandInjectionSanitizer
     or
     this.getType() instanceof BoxedType
     or
+    this.getType() instanceof NumberType
+    or
     isSafeCommandArgument(this.asExpr())
   }
 }