hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Remove unnecessary methods

Browse Source
This commit is contained in:
Ed Minnix
2023-07-28 15:49:33 -04:00
parent a3a4c31911
commit e22a67e7fe
1 changed files with 1 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll
View File

@@ -55,17 +55,9 @@ private predicate esapiIsValidData(Guard g, Expr e, boolean branch) {
module TrustBoundaryConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node source) { source instanceof TrustBoundaryViolationSource }
predicate isAdditionalFlowStep(DataFlow::Node n1, DataFlow::Node n2) {
n2.asExpr().(MethodAccess).getQualifier() = n1.asExpr()
}
predicate isBarrier(DataFlow::Node node) {
node instanceof TrustBoundaryValidationSanitizer or
node.getType() instanceof HttpServletSession or
node.asExpr()
.(MethodAccess)
.getMethod()
.hasQualifiedName("javax.servlet.http", "HttpServletRequest", "getMethod")
node.getType() instanceof HttpServletSession
}
predicate isSink(DataFlow::Node sink) { sink instanceof TrustBoundaryViolationSink }