import org.springframework.web.multipart.MultipartFile; import org.springframework.web.multipart.MultipartRequest; public class SpringMultiPart { MultipartFile file; private static void sink(Object o) {} public void test() throws Exception { sink(file.getBytes()); // $hasRemoteValueFlow sink(file.isEmpty()); // Safe sink(file.getInputStream()); // $hasRemoteValueFlow sink(file.getResource()); // $hasRemoteValueFlow sink(file.getName()); // $hasRemoteValueFlow sink(file.getContentType()); // $hasRemoteValueFlow sink(file.getOriginalFilename()); // $hasRemoteValueFlow } public void test(MultipartRequest request) { sink(request.getFile("name"));// $hasRemoteValueFlow sink(request.getFileMap());// $hasRemoteValueFlow sink(request.getFileNames());// $hasRemoteValueFlow sink(request.getFiles("name"));// $hasRemoteValueFlow sink(request.getMultiFileMap());// $hasRemoteValueFlow sink(request.getMultipartContentType("name")); // $hasRemoteValueFlow } }