mirror of
https://github.com/github/codeql.git
synced 2025-12-18 09:43:15 +01:00
29 lines
972 B
Java
29 lines
972 B
Java
import org.springframework.security.web.savedrequest.SavedRequest;
|
|
import org.springframework.security.web.savedrequest.SimpleSavedRequest;
|
|
|
|
public class SpringSavedRequest {
|
|
SavedRequest sr;
|
|
|
|
private static void sink(Object o) {}
|
|
|
|
public void test() {
|
|
sink(sr.getRedirectUrl()); // $hasRemoteValueFlow
|
|
sink(sr.getCookies()); // $hasRemoteValueFlow
|
|
sink(sr.getHeaderValues("name")); // $hasRemoteValueFlow
|
|
sink(sr.getHeaderNames()); // $hasRemoteValueFlow
|
|
sink(sr.getParameterValues("name")); // $hasRemoteValueFlow
|
|
sink(sr.getParameterMap()); // $hasRemoteValueFlow
|
|
}
|
|
|
|
SimpleSavedRequest ssr;
|
|
|
|
public void test2() {
|
|
sink(ssr.getRedirectUrl()); // $hasRemoteValueFlow
|
|
sink(ssr.getCookies()); // $hasRemoteValueFlow
|
|
sink(ssr.getHeaderValues("name")); // $hasRemoteValueFlow
|
|
sink(ssr.getHeaderNames()); // $hasRemoteValueFlow
|
|
sink(ssr.getParameterValues("name")); // $hasRemoteValueFlow
|
|
sink(ssr.getParameterMap()); // $hasRemoteValueFlow
|
|
}
|
|
}
|