mirror of
https://github.com/github/codeql.git
synced 2026-02-19 16:33:40 +01:00
23 lines
615 B
Plaintext
23 lines
615 B
Plaintext
/**
|
|
* @name Supported flow steps in external libraries
|
|
* @description A list of 3rd party APIs detected as flow steps. Excludes test and generated code.
|
|
* @kind metric
|
|
* @tags summary
|
|
* @id java/telemetry/supported-external-api-taint
|
|
*/
|
|
|
|
import java
|
|
import ExternalApi
|
|
import semmle.code.java.GeneratedFiles
|
|
|
|
from ExternalApi api, int usages
|
|
where
|
|
not api.isUninteresting() and
|
|
api.hasSummary() and
|
|
usages =
|
|
strictcount(Call c |
|
|
c.getCallee().getSourceDeclaration() = api and
|
|
not c.getFile() instanceof GeneratedFile
|
|
)
|
|
select api.getApiName() as apiname, usages order by usages desc
|