mirror of
https://github.com/github/codeql.git
synced 2026-03-06 23:56:48 +01:00
14 lines
516 B
Plaintext
14 lines
516 B
Plaintext
import java
|
|
import semmle.code.java.dataflow.TaintTracking
|
|
|
|
class TaintedOGNLConfig extends TaintTracking::Configuration {
|
|
TaintedOGNLConfig() { this = "TaintedOGNLConfig" }
|
|
override predicate isSource(DataFlow::Node source) { /* TBD */ }
|
|
override predicate isSink(DataFlow::Node sink) { /* TBD */ }
|
|
}
|
|
|
|
from TaintedOGNLConfig cfg, DataFlow::Node source, DataFlow::Node sink
|
|
where cfg.hasFlow(source, sink)
|
|
select source,
|
|
"This untrusted input is evaluated as an OGNL expression $@.",
|
|
sink, "here" |