hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 13:45:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Finished up

Browse Source
This commit is contained in:
Kevin Stubbings
2024-09-27 19:24:40 +00:00
parent 1b5299de5a
commit f0560458af
48 changed files with 1018 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
java/ql/test/library-tests/dataflow/taintsources/FileUpload.java
View File

@@ -1,16 +1,17 @@
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.Part;
import org.apache.commons.fileupload.FileItem;
import org.apache.commons.fileupload.FileItemStream;
public class FileUpload {
private HttpServletRequest request;
private HttpServletResponse response;
private Part filePart;
private javax.servlet.http.Part filePart;
private FileItem fileItem;
private FileItemStream fileItemStream;
private jakarta.servlet.http.Part jakartaPart;
private static void sink(Object o) {}
@@ -29,11 +30,17 @@ public class FileUpload {
sink(fileItem.getContentType()); // $ hasRemoteValueFlow
sink(fileItem.getName()); // $ hasRemoteValueFlow
//These result in a compiler error when uncommented
//sink(fileItemStream) // $ hasRemoteValueFlow
//sink(fileItemStream.getFieldName()) // $ hasRemoteValueFlow
//sink(fileItemStream.getName()) // $ hasRemoteValueFlow
//sink(fileItemStream.openStream()) // $ hasRemoteValueFlow
sink(fileItemStream.getFieldName()); // $ hasRemoteValueFlow
sink(fileItemStream.getName()); // $ hasRemoteValueFlow
sink(fileItemStream.openStream()); // $ hasRemoteValueFlow
sink(jakartaPart.getContentType()); // $ hasRemoteValueFlow
sink(jakartaPart.getHeader("test")); // $ hasRemoteValueFlow
sink(jakartaPart.getInputStream()); // $ hasRemoteValueFlow
sink(jakartaPart.getHeaders("test")); // $ hasRemoteValueFlow
sink(jakartaPart.getHeaderNames()); // $ hasRemoteValueFlow
sink(jakartaPart.getSubmittedFileName()); // $ hasRemoteValueFlow
sink(jakartaPart.getName()); // $ hasRemoteValueFlow
}
}