mirror of
https://github.com/github/codeql.git
synced 2026-03-30 20:28:15 +02:00
28 lines
1006 B
Java
28 lines
1006 B
Java
import org.springframework.web.multipart.MultipartFile;
|
|
import org.springframework.web.multipart.MultipartRequest;
|
|
|
|
public class SpringMultiPart {
|
|
MultipartFile file;
|
|
|
|
private static void sink(Object o) {}
|
|
|
|
public void test() throws Exception {
|
|
sink(file.getBytes()); // $ hasRemoteValueFlow
|
|
sink(file.isEmpty()); // Safe
|
|
sink(file.getInputStream()); // $ hasRemoteValueFlow
|
|
sink(file.getResource()); // $ hasRemoteValueFlow
|
|
sink(file.getName()); // $ hasRemoteValueFlow
|
|
sink(file.getContentType()); // $ hasRemoteValueFlow
|
|
sink(file.getOriginalFilename()); // $ hasRemoteValueFlow
|
|
}
|
|
|
|
public void test(MultipartRequest request) {
|
|
sink(request.getFile("name"));// $ hasRemoteValueFlow
|
|
sink(request.getFileMap());// $ hasRemoteValueFlow
|
|
sink(request.getFileNames());// $ hasRemoteValueFlow
|
|
sink(request.getFiles("name"));// $ hasRemoteValueFlow
|
|
sink(request.getMultiFileMap());// $ hasRemoteValueFlow
|
|
sink(request.getMultipartContentType("name")); // $ hasRemoteValueFlow
|
|
}
|
|
}
|