hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Exclude test directories of typical build tools

Browse Source
This commit is contained in:
luchua-bc
2021-02-18 00:50:38 +00:00
parent 5e36eedcb6
commit e916ce8b9b
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/src/experimental/Security/CWE/CWE-489/ServletMain.ql
View File

@@ -42,7 +42,8 @@ class ServletMainMethod extends Method {
this.getNumberOfParameters() = 1 and
this.getParameter(0).getType() instanceof Array and
not this.getDeclaringType().getName().toLowerCase().matches("%test%") and // Simple check to exclude test classes to reduce FPs
not this.getDeclaringType().getPackage().getName().toLowerCase().matches("%test%") // Simple check to exclude classes in test packages to reduce FPs
not this.getDeclaringType().getPackage().getName().toLowerCase().matches("%test%") and // Simple check to exclude classes in test packages to reduce FPs
not exists(this.getLocation().getFile().getAbsolutePath().indexOf("/src/test/java")) // Match test directory structure of build tools like maven
}
}