Java: Diff-informed SqlTainted.ql

2026-04-25 08:45:14 +02:00 · 2024-10-05 21:32:25 +02:00
parent 2561cec80c
commit eac1a4c002
1 changed files with 2 additions and 0 deletions
--- a/java/ql/lib/semmle/code/java/security/SqlInjectionQuery.qll
+++ b/java/ql/lib/semmle/code/java/security/SqlInjectionQuery.qll
@@ -24,6 +24,8 @@ module QueryInjectionFlowConfig implements DataFlow::ConfigSig {
  predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
    any(AdditionalQueryInjectionTaintStep s).step(node1, node2)
  }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }

 /** Tracks flow of unvalidated user input that is used in SQL queries. */