Java: add nativeSQL as summary model

This commit is contained in:
Jami Cogswell
2023-03-20 16:45:03 -04:00
committed by Jami
parent 536bc9ac89
commit ea626a03b6

View File

@@ -3,6 +3,7 @@ extensions:
pack: codeql/java-all
extensible: sinkModel
data:
# - ["java.sql", "Connection", True, "nativeSQL", "", "", "Argument[0]", "sql", "manual"]
- ["java.sql", "Connection", True, "prepareCall", "", "", "Argument[0]", "sql", "manual"]
- ["java.sql", "Connection", True, "prepareStatement", "", "", "Argument[0]", "sql", "manual"]
- ["java.sql", "DatabaseMetaData", True, "getColumns", "(String,String,String,String)", "", "Argument[2]", "sql", "ai-generated"]
@@ -20,6 +21,7 @@ extensions:
pack: codeql/java-all
extensible: summaryModel
data:
- ["java.sql", "Connection", True, "nativeSQL", "", "", "Argument[0]", "ReturnValue", "taint", "manual"]
- ["java.sql", "PreparedStatement", True, "setString", "(int,String)", "", "Argument[1]", "Argument[this]", "value", "manual"]
- ["java.sql", "ResultSet", True, "getString", "(String)", "", "Argument[this]", "ReturnValue", "taint", "manual"]
- addsTo: