hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Make more ExternalFlow imports private

Browse Source
This commit is contained in:
Tony Torralba
2022-05-03 09:32:43 +02:00
parent 86516b157b
commit c66e583aea
12 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/security/CleartextStorageAndroidFilesystemQuery.qll
View File

@@ -5,7 +5,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
import semmle.code.java.security.CleartextStorageQuery import semmle.code.java.security.CleartextStorageQuery
import semmle.code.java.security.Files import semmle.code.java.security.Files
import semmle.code.xml.AndroidManifest import semmle.code.xml.AndroidManifest

2
java/ql/lib/semmle/code/java/security/Files.qll
View File

@@ -1,7 +1,7 @@
/** Provides classes and predicates to work with File objects. */ /** Provides classes and predicates to work with File objects. */
import java import java
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
private class CreateFileSinkModels extends SinkModelCsv { private class CreateFileSinkModels extends SinkModelCsv {
override predicate row(string row) { override predicate row(string row) {

2
java/ql/lib/semmle/code/java/security/InformationLeak.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
import semmle.code.java.security.XSS import semmle.code.java.security.XSS
/** CSV sink models representing methods not susceptible to XSS but outputing to an HTTP response body. */ /** CSV sink models representing methods not susceptible to XSS but outputing to an HTTP response body. */

2
java/ql/lib/semmle/code/java/security/LogInjection.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
/** A data flow sink for unvalidated user input that is used to log messages. */ /** A data flow sink for unvalidated user input that is used to log messages. */
abstract class LogInjectionSink extends DataFlow::Node { } abstract class LogInjectionSink extends DataFlow::Node { }

2
java/ql/lib/semmle/code/java/security/QueryInjection.qll
View File

@@ -4,7 +4,7 @@ import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.frameworks.javaee.Persistence import semmle.code.java.frameworks.javaee.Persistence
private import semmle.code.java.frameworks.MyBatis private import semmle.code.java.frameworks.MyBatis
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
/** A sink for database query language injection vulnerabilities. */ /** A sink for database query language injection vulnerabilities. */
abstract class QueryInjectionSink extends DataFlow::Node { } abstract class QueryInjectionSink extends DataFlow::Node { }

2
java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
View File

@@ -1,7 +1,7 @@
/** Provides configurations for sensitive logging queries. */ /** Provides configurations for sensitive logging queries. */
import java import java
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
import semmle.code.java.dataflow.TaintTracking import semmle.code.java.dataflow.TaintTracking
import semmle.code.java.security.SensitiveActions import semmle.code.java.security.SensitiveActions
import DataFlow import DataFlow

2
java/ql/lib/semmle/code/java/security/UrlRedirect.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
import semmle.code.java.frameworks.Servlets import semmle.code.java.frameworks.Servlets
import semmle.code.java.frameworks.ApacheHttp import semmle.code.java.frameworks.ApacheHttp
private import semmle.code.java.frameworks.JaxWS private import semmle.code.java.frameworks.JaxWS

2
java/ql/lib/semmle/code/java/security/XPath.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
/** /**
* A sink that represents a method that interprets XPath expressions. * A sink that represents a method that interprets XPath expressions.

2
java/ql/lib/semmle/code/java/security/XSS.qll
View File

@@ -8,7 +8,7 @@ import semmle.code.java.frameworks.spring.SpringHttp
import semmle.code.java.frameworks.javaee.jsf.JSFRenderer import semmle.code.java.frameworks.javaee.jsf.JSFRenderer
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.TaintTracking2 import semmle.code.java.dataflow.TaintTracking2
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
/** A sink that represent a method that outputs data without applying contextual output encoding. */ /** A sink that represent a method that outputs data without applying contextual output encoding. */
abstract class XssSink extends DataFlow::Node { } abstract class XssSink extends DataFlow::Node { }

2
java/ql/lib/semmle/code/java/security/XsltInjection.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
/** /**
* A data flow sink for unvalidated user input that is used in XSLT transformation. * A data flow sink for unvalidated user input that is used in XSLT transformation.

2
java/ql/src/experimental/Security/CWE/CWE-200/AndroidFileIntentSink.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
import semmle.code.java.frameworks.android.Android import semmle.code.java.frameworks.android.Android
import semmle.code.java.frameworks.android.Intent import semmle.code.java.frameworks.android.Intent

2
java/ql/src/experimental/Security/CWE/CWE-400/ThreadResourceAbuse.qll
View File

@@ -2,7 +2,7 @@
import java import java
import semmle.code.java.dataflow.DataFlow import semmle.code.java.dataflow.DataFlow
import semmle.code.java.dataflow.ExternalFlow private import semmle.code.java.dataflow.ExternalFlow
import semmle.code.java.dataflow.FlowSteps import semmle.code.java.dataflow.FlowSteps
/** `java.lang.Math` data model for value comparison in the new CSV format. */ /** `java.lang.Math` data model for value comparison in the new CSV format. */