codeql/java/ql/test/query-tests/security/CWE-311/CWE-319/UseSSLTest.java

import java.net.HttpURLConnection;
import javax.net.ssl.HttpsURLConnection;
import java.io.*;

class UseSSLTest {
  public void m1(HttpURLConnection connection) throws java.io.IOException {
    InputStream input;
    if (connection instanceof HttpsURLConnection) {
      input = connection.getInputStream(); // OK
    } else {
      input = connection.getInputStream(); // $ Alert[java/non-ssl-connection] // BAD
    }
  }
}