codeql/java/ql/test/library-tests/dataflow/scoped-values/ScopedValueFlowTest.java

import java.lang.ScopedValue;

public class ScopedValueFlowTest {
    private static final ScopedValue<String> USER_CONTEXT = ScopedValue.newInstance();
    private static final ScopedValue<String> SESSION_ID = ScopedValue.newInstance();

    public static String source(String label) {
        return "tainted";
    }

    public static void sink(String value) {}

    public static void main(String[] args) {
        String userInput = source("");

        // Test 1: Basic scoped value binding and retrieval
        ScopedValue.where(USER_CONTEXT, userInput)
            .run(() -> {
                String value = USER_CONTEXT.get();
                sink(value); // $ hasTaintFlow
            });

        // Test 2: Multiple scoped value bindings with chaining
        ScopedValue.where(USER_CONTEXT, userInput)
            .where(SESSION_ID, "safe-one")
            .run(() -> {
                String user = USER_CONTEXT.get();
                String session = SESSION_ID.get();
                sink(user); // $ hasTaintFlow
                sink(session); // safe - should NOT have taint flow
            });

        ScopedValue.where(USER_CONTEXT, userInput)
            .run(() -> {
                String outer = USER_CONTEXT.get();
                ScopedValue.where(USER_CONTEXT, "safe-two")
                    .run(() -> {
                        String inner = USER_CONTEXT.get();
                        sink(inner); // $ SPURIOUS: hasTaintFlow
                    });
                sink(outer); // $ hasTaintFlow
            });
    }
}