mirror of
https://github.com/github/codeql.git
synced 2026-05-24 08:07:07 +02:00
cf31af77c9
Add CodeQL support for Micronaut: add MaD models for HTTP, HTTP client and multipart (sources, sinks and summary propagation), new framework QLL modules (Controller, WebSocket, Config, Data, Security). Add library tests and query tests exercising request inputs, file uploads, HttpClient sinks (SSRF), header sinks (response-splitting) and redirect sinks (open-redirect), plus expected results and extractor options. Include Micronaut 4.x stubs used by the tests.
19 lines
560 B
Java
19 lines
560 B
Java
import io.micronaut.http.annotation.*;
|
|
import io.micronaut.http.multipart.CompletedFileUpload;
|
|
import java.io.IOException;
|
|
|
|
@Controller("/upload")
|
|
class MicronautFileUploadTest {
|
|
|
|
void sink(Object o) {}
|
|
|
|
@Post("/file")
|
|
void testFileUpload(CompletedFileUpload file) throws IOException {
|
|
sink(file.getFilename()); // $hasTaintFlow
|
|
sink(file.getBytes()); // $hasTaintFlow
|
|
sink(file.getInputStream()); // $hasTaintFlow
|
|
sink(file.getContentType()); // $hasTaintFlow
|
|
sink(file.getSize()); // $hasTaintFlow
|
|
}
|
|
}
|