Skip to content

Commit a802700

Browse files
committed
Java: Promote models for CWE-625.
1 parent da6ceb1 commit a802700

File tree

3 files changed

+10
-14
lines changed

3 files changed

+10
-14
lines changed

java/ext/experimental/javax.servlet.http.model.yml

Lines changed: 0 additions & 10 deletions
This file was deleted.
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
extensions:
2+
- addsTo:
3+
pack: codeql/java-all
4+
extensible: sourceModel
5+
data:
6+
- ["javax.servlet.http", "HttpServletRequest", False, "getPathInfo", "()", "", "ReturnValue", "uri-path", "manual"] #permissive-dot-regex-query
7+
- ["javax.servlet.http", "HttpServletRequest", False, "getPathTranslated", "()", "", "ReturnValue", "uri-path", "manual"] #permissive-dot-regex-query
8+
- ["javax.servlet.http", "HttpServletRequest", False, "getRequestURI", "()", "", "ReturnValue", "uri-path", "manual"] #permissive-dot-regex-query
9+
- ["javax.servlet.http", "HttpServletRequest", False, "getRequestURL", "()", "", "ReturnValue", "uri-path", "manual"] #permissive-dot-regex-query
10+
- ["javax.servlet.http", "HttpServletRequest", False, "getServletPath", "()", "", "ReturnValue", "uri-path", "manual"] #permissive-dot-regex-query

java/src/security/CWE-625/PermissiveDotRegexQuery.qll

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,10 +8,6 @@ import semmle.code.java.controlflow.Guards
88
import semmle.code.java.security.UrlRedirect
99
import Regex
1010

11-
private class ActivateModels extends ActiveExperimentalModels {
12-
ActivateModels() { this = "permissive-dot-regex-query" }
13-
}
14-
1511
/** A string that ends with `.*` not prefixed with `\`. */
1612
private class PermissiveDotStr extends StringLiteral {
1713
PermissiveDotStr() {

0 commit comments

Comments
 (0)