hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>
This commit is contained in:
Alvaro Muñoz
2020-10-22 14:15:35 +02:00
committed by Alvaro Muñoz
parent c1decf4d0d
commit df4164f2c0
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
java/ql/src/experimental/Security/CWE/CWE-094/InsecureBeanValidation.ql
View File

@@ -21,8 +21,7 @@ class BeanValidationSource extends RemoteFlowSource {
m.getParameter(0) = v and
m
.getDeclaringType()
.getASupertype+()
.getSourceDeclaration()
.getASourceSupertype+()
.hasQualifiedName("javax.validation", "ConstraintValidator") and
m.hasName("isValid") and
m.fromSource()
@@ -34,10 +33,10 @@ class BeanValidationSource extends RemoteFlowSource {
class BuildConstraintViolationWithTemplateMethod extends Method {
BuildConstraintViolationWithTemplateMethod() {
getDeclaringType()
this.getDeclaringType()
.getASupertype*()
.hasQualifiedName("javax.validation", "ConstraintValidatorContext") and
hasName("buildConstraintViolationWithTemplate")
this.hasName("buildConstraintViolationWithTemplate")
}
}