mirror of
https://github.com/github/codeql.git
synced 2025-12-19 10:23:15 +01:00
17 lines
905 B
YAML
17 lines
905 B
YAML
extensions:
|
|
- addsTo:
|
|
pack: codeql/java-all
|
|
extensible: neutralModel
|
|
data:
|
|
# summary neutrals
|
|
# The below APIs have numeric flow and are currently being stored as neutral models.
|
|
# These may be changed to summary models with kinds "value-numeric" and "taint-numeric" (or similar) in the future.
|
|
- ["java.text", "DateFormat", "format", "(Date)", "summary", "manual"] # taint-numeric
|
|
- ["java.text", "DateFormat", "parse", "(String)", "summary", "manual"] # taint-numeric
|
|
- ["java.text", "SimpleDateFormat", "SimpleDateFormat", "(String)", "summary", "manual"] # taint-numeric
|
|
|
|
# sink neutrals
|
|
- ["java.text", "Collator", "compare", "", "sink", "hq-manual"]
|
|
- ["java.text", "Collator", "equals", "", "sink", "hq-manual"]
|
|
- ["java.text", "RuleBasedCollator", "compare", "", "sink", "hq-manual"]
|