hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Make EnvTaintedMethod public + QL-Doc

Browse Source
This commit is contained in:
intrigus
2020-12-09 23:40:27 +01:00
parent e021158b5f
commit d98b171998
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/src/semmle/code/java/dataflow/FlowSources.qll
View File

@@ -292,7 +292,8 @@ private class SpringWebRequestGetMethod extends Method {
}
}
private class EnvTaintedMethod extends Method {
/** Models methods that are tainted by the environment of the user, such as `System.getProperty` or `System.getenv()`. */
class EnvTaintedMethod extends Method {
EnvTaintedMethod() {
this instanceof MethodSystemGetenv or
this instanceof PropertiesGetPropertyMethod or