hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'upstream/main' into igfoo/kotlin_merge

Browse Source 
Resolving conflicts:
	java/ql/lib/semmle/code/java/Expr.qll
This commit is contained in:
Ian Lynagh
2022-05-11 14:13:09 +01:00
parent b7a0b56e41 46f309c373
commit c0a755e061
600 changed files with 26766 additions and 5311 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
java/ql/src/Security/CWE/CWE-319/HttpsUrls.ql
View File

@@ -14,10 +14,7 @@ import java
import semmle.code.java.security.HttpsUrlsQuery
import DataFlow::PathGraph
from DataFlow::PathNode source, DataFlow::PathNode sink, MethodAccess m, HttpStringLiteral s
where
source.getNode().asExpr() = s and
sink.getNode().asExpr() = m.getQualifier() and
any(HttpStringToUrlOpenMethodFlowConfig c).hasFlowPath(source, sink)
select m, source, sink, "URL may have been constructed with HTTP protocol, using $@.", s,
"this source"
from DataFlow::PathNode source, DataFlow::PathNode sink
where any(HttpStringToUrlOpenMethodFlowConfig c).hasFlowPath(source, sink)
select sink.getNode(), source, sink, "URL may have been constructed with HTTP protocol, using $@.",
source.getNode(), "this source"