mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
10 lines
438 B
Plaintext
10 lines
438 B
Plaintext
import semmle.code.java.security.SqlUnescapedLib
|
|
|
|
from StringBuilderVar sbv, Expr uncontrolled, Method method, int methodLine
|
|
where
|
|
uncontrolledStringBuilderQuery(sbv, uncontrolled) and
|
|
method = uncontrolled.getEnclosingCallable() and
|
|
methodLine = method.getLocation().getStartLine()
|
|
select method.getName(), sbv.getLocation().getStartLine() - methodLine, sbv,
|
|
uncontrolled.getLocation().getStartLine() - methodLine, uncontrolled
|