hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-21 23:14:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add test for "tokenizer"

Browse Source
This commit is contained in:
Owen Mansel-Chan
2024-07-30 15:36:35 +01:00
parent 0d71072f94
commit bdff0fdcc5
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/test/query-tests/security/CWE-532/Test.java
View File

@@ -1,12 +1,13 @@
import org.apache.logging.log4j.Logger;
class Test {
void test(String password, String authToken, String username, String nullToken) {
void test(String password, String authToken, String username, String nullToken, String stringTokenizer) {
Logger logger = null;
logger.info("User's password is: " + password); // $ hasTaintFlow
logger.error("Auth failed for: " + authToken); // $ hasTaintFlow
logger.error("Auth failed for: " + username); // Safe
logger.error("Auth failed for: " + nullToken); // Safe
logger.error("Auth failed for: " + stringTokenizer); // $ hasTaintFlow
}
}