Re-add allowImplicitRead

egregius313 · egregius313 · commit 3826b9be6caa · 2023-04-13T23:06:16.000-04:00
diff --git a/java/ql/lib/semmle/code/java/security/SensitiveResultReceiverQuery.qll b/java/ql/lib/semmle/code/java/security/SensitiveResultReceiverQuery.qll
@@ -40,6 +40,8 @@ private module SensitiveResultReceiverConfig implements DataFlow::ConfigSig {
       node.asExpr() = call.getSentData()
     )
   }
+
+  predicate allowImplicitRead(DataFlow::Node n, DataFlow::ContentSet c) { isSink(n) and exists(c) }
 }
 
 module SensitiveResultReceiverFlow = TaintTracking::Global<SensitiveResultReceiverConfig>;

Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,8 @@ private module SensitiveResultReceiverConfig implements DataFlow::ConfigSig {`
`40`	`40`	`node.asExpr() = call.getSentData()`
`41`	`41`	`)`
`42`	`42`	`}`
	`43`	`+`
	`44`	`+ predicate allowImplicitRead(DataFlow::Node n, DataFlow::ContentSet c) { isSink(n) and exists(c) }`
`43`	`45`	`}`
`44`	`46`
`45`	`47`	`module SensitiveResultReceiverFlow = TaintTracking::Global<SensitiveResultReceiverConfig>;`