hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6162 from smowton/smowton/feature/jax-rs-content-type-sensitivity-fixes

Browse Source 
Jax-RS: implement content-type tracking
This commit is contained in:
Chris Smowton
2021-08-03 14:53:31 +01:00
committed by GitHub
parent 23ba7dcf9c 3bf41491b3
commit eaf3d3cc03
8 changed files with 228 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/src/Security/CWE/CWE-079/XSS.ql
View File

@@ -25,6 +25,8 @@ class XSSConfig extends TaintTracking::Configuration {
override predicate isSanitizer(DataFlow::Node node) { node instanceof XssSanitizer }
override predicate isSanitizerOut(DataFlow::Node node) { node instanceof XssSinkBarrier }
override predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
any(XssAdditionalTaintStep s).step(node1, node2)
}