Files
codeql/java/ql/test/query-tests/security/CWE-798/semmle/tests/CredentialsTest.java
2018-08-30 10:48:05 +01:00

21 lines
636 B
Java

package test.cwe798.cwe.examples;
import java.sql.DriverManager;
import java.sql.SQLException;
public class CredentialsTest {
private static final String p = "123456"; // hard-coded credential (flow source)
public static void main(String[] args) throws SQLException {
String url = "jdbc:mysql://localhost/test";
String u = "admin"; // hard-coded credential (flow source)
DriverManager.getConnection(url, u, p); // sensitive call (flow target)
test(url, u, p);
}
public static void test(String url, String v, String q) throws SQLException {
DriverManager.getConnection(url, v, q); // sensitive call (flow target)
}
}