From c49bf01dc832f37e3cb6ceeec88e84ef1556b9a7 Mon Sep 17 00:00:00 2001 From: Ed Minnix Date: Wed, 12 Apr 2023 20:37:01 -0400 Subject: [PATCH] Refactor PermissiveDotRegex.ql --- .../experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql b/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql index b24b36053b8..2e4a0311126 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-625/PermissiveDotRegex.ql @@ -14,10 +14,10 @@ import java import semmle.code.java.dataflow.FlowSources -import DataFlow::PathGraph +import MatchRegexFlow::PathGraph import PermissiveDotRegexQuery -from DataFlow::PathNode source, DataFlow::PathNode sink, MatchRegexConfiguration conf -where conf.hasFlowPath(source, sink) +from MatchRegexFlow::PathNode source, MatchRegexFlow::PathNode sink +where MatchRegexFlow::flowPath(source, sink) select sink.getNode(), source, sink, "Potentially authentication bypass due to $@.", source.getNode(), "user-provided value"