Files
codeql/java/ql/lib/semmle/code/java/security/HardcodedPasswordField.qll
2022-08-23 09:41:00 +01:00

16 lines
416 B
Plaintext

/**
* Provides a predicate identifying assignments of harcoded values to password fields.
*/
import java
import HardcodedCredentials
/**
* Holds if non-empty constant value `e` is assigned to password field `f`.
*/
predicate passwordFieldAssignedHardcodedValue(PasswordVariable f, CompileTimeConstantExpr e) {
f instanceof Field and
f.getAnAssignedValue() = e and
not e.(StringLiteral).getValue() = ""
}