codeql/java/ql/test/library-tests/dataflow/taintsources/SpringMultiPart.java

import org.springframework.web.multipart.MultipartFile;
import org.springframework.web.multipart.MultipartRequest;

public class SpringMultiPart {
	MultipartFile file;

	private static void sink(Object o) {}

	public void test() throws Exception {
		sink(file.getBytes()); // $hasRemoteValueFlow
		sink(file.isEmpty()); // Safe
		sink(file.getInputStream()); // $hasRemoteValueFlow
		sink(file.getResource()); // $hasRemoteValueFlow
		sink(file.getName()); // $hasRemoteValueFlow
		sink(file.getContentType()); // $hasRemoteValueFlow
		sink(file.getOriginalFilename()); // $hasRemoteValueFlow
	}

	public void test(MultipartRequest request) {
		sink(request.getFile("name"));// $hasRemoteValueFlow
		sink(request.getFileMap());// $hasRemoteValueFlow
		sink(request.getFileNames());// $hasRemoteValueFlow
		sink(request.getFiles("name"));// $hasRemoteValueFlow
		sink(request.getMultiFileMap());// $hasRemoteValueFlow
		sink(request.getMultipartContentType("name")); // $hasRemoteValueFlow
	}
}