hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-21 23:14:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

add explicit QLDoc that any method named "contains" is matched

Browse Source
This commit is contained in:
erik-krogh
2024-03-12 15:25:27 +01:00
parent 35aae0a981
commit f613823047
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
java/ql/lib/semmle/code/java/security/RequestForgery.qll
View File

@@ -86,7 +86,9 @@ private class HostnameSantizer extends RequestForgerySanitizer {
}
/**
* An argument to a call to `List.contains()` that is a sanitizer for URL redirects.
* An argument to a call to a `.contains()` method that is a sanitizer for URL redirects.
*
* Matches any method call where the method is named `contains`.
*/
private predicate isContainsUrlSanitizer(Guard guard, Expr e, boolean branch) {
guard =