Files
codeql/java/ql/test/query-tests/security/CWE-089/semmle/examples/getAnAppend.ql
2018-10-11 11:31:37 +02:00

8 lines
397 B
Plaintext

import semmle.code.java.dataflow.TaintTracking
from StringBuilderVar sbv, MethodAccess append, Method method
where sbv.getAnAppend() = append and append.getEnclosingCallable() = method
select method.getName(), sbv.getLocation().getStartLine() - method.getLocation().getStartLine(),
sbv, append.getLocation().getStartLine() - method.getLocation().getStartLine(), append,
append.getArgument(0)