hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Java: Remove SensitiveLoggingQuery results that flow through a source.

Browse Source
This commit is contained in:
Anders Schack-Mulligen
2022-08-10 14:28:07 +02:00
parent 8c32758ae5
commit ecc15a1f95
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll
View File

@@ -28,4 +28,6 @@ class SensitiveLoggerConfiguration extends TaintTracking::Configuration {
override predicate isSanitizer(DataFlow::Node sanitizer) {
sanitizer.asExpr() instanceof LiveLiteral
}
override predicate isSanitizerIn(Node node) { isSource(node) }
}

4
java/ql/src/change-notes/2022-08-10-sensitive-log-dedup.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: majorAnalysis
---
* The query `java/sensitive-log` has been improved to no longer report results that are effectively duplicates due to one source flowing to another source.