3
3
import java
4
4
private import semmle.code.java.dataflow.ExternalFlow
5
5
6
- private class ApacheStrBuilderModel extends SummaryModelCsv {
6
+ private class ApacheCommonsLangModel extends SummaryModelCsv {
7
7
override predicate row ( string row ) {
8
8
row =
9
9
[
@@ -155,15 +155,7 @@ private class ApacheStrBuilderModel extends SummaryModelCsv {
155
155
"org.apache.commons.text;TextStringBuilder;false;toCharArray;;;Argument[-1];ReturnValue;taint" ,
156
156
"org.apache.commons.text;TextStringBuilder;false;toString;;;Argument[-1];ReturnValue;taint" ,
157
157
"org.apache.commons.text;TextStringBuilder;false;toStringBuffer;;;Argument[-1];ReturnValue;taint" ,
158
- "org.apache.commons.text;TextStringBuilder;false;toStringBuilder;;;Argument[-1];ReturnValue;taint"
159
- ]
160
- }
161
- }
162
-
163
- private class ApacheStrBuilderFluentMethodsModel extends SummaryModelCsv {
164
- override predicate row ( string row ) {
165
- row =
166
- [
158
+ "org.apache.commons.text;TextStringBuilder;false;toStringBuilder;;;Argument[-1];ReturnValue;taint" ,
167
159
"org.apache.commons.text;StrBuilder;false;append;;;Argument[-1];ReturnValue;value" ,
168
160
"org.apache.commons.text;StrBuilder;false;appendAll;;;Argument[-1];ReturnValue;value" ,
169
161
"org.apache.commons.text;StrBuilder;false;appendFixedWidthPadLeft;;;Argument[-1];ReturnValue;value" ,
@@ -215,18 +207,7 @@ private class ApacheStrBuilderFluentMethodsModel extends SummaryModelCsv {
215
207
"org.apache.commons.text;TextStringBuilder;false;setLength;;;Argument[-1];ReturnValue;value" ,
216
208
"org.apache.commons.text;TextStringBuilder;false;setNewLineText;;;Argument[-1];ReturnValue;value" ,
217
209
"org.apache.commons.text;TextStringBuilder;false;setNullText;;;Argument[-1];ReturnValue;value" ,
218
- "org.apache.commons.text;TextStringBuilder;false;trim;;;Argument[-1];ReturnValue;value"
219
- ]
220
- }
221
- }
222
-
223
- /**
224
- * Taint-propagating models for `WordUtils`.
225
- */
226
- private class ApacheWordUtilsModel extends SummaryModelCsv {
227
- override predicate row ( string row ) {
228
- row =
229
- [
210
+ "org.apache.commons.text;TextStringBuilder;false;trim;;;Argument[-1];ReturnValue;value" ,
230
211
"org.apache.commons.text;WordUtils;false;wrap;;;Argument[0];ReturnValue;taint" ,
231
212
"org.apache.commons.text;WordUtils;false;wrap;(java.lang.String,int,java.lang.String,boolean);;Argument[2];ReturnValue;taint" ,
232
213
"org.apache.commons.text;WordUtils;false;wrap;(java.lang.String,int,java.lang.String,boolean,java.lang.String);;Argument[2];ReturnValue;taint" ,
@@ -240,18 +221,7 @@ private class ApacheWordUtilsModel extends SummaryModelCsv {
240
221
"org.apache.commons.text;WordUtils;false;initials;(java.lang.String);;Argument[0];ReturnValue;taint" ,
241
222
"org.apache.commons.text;WordUtils;false;initials;(java.lang.String,char[]);;Argument[0];ReturnValue;taint" ,
242
223
"org.apache.commons.text;WordUtils;false;capitalizeFully;(java.lang.String);;Argument[0];ReturnValue;taint" ,
243
- "org.apache.commons.text;WordUtils;false;capitalizeFully;(java.lang.String,char[]);;Argument[0];ReturnValue;taint"
244
- ]
245
- }
246
- }
247
-
248
- /**
249
- * Taint-propagating models for `StrTokenizer`.
250
- */
251
- private class ApacheStrTokenizerModel extends SummaryModelCsv {
252
- override predicate row ( string row ) {
253
- row =
254
- [
224
+ "org.apache.commons.text;WordUtils;false;capitalizeFully;(java.lang.String,char[]);;Argument[0];ReturnValue;taint" ,
255
225
"org.apache.commons.text;StrTokenizer;false;StrTokenizer;;;Argument[0];Argument[-1];taint" ,
256
226
"org.apache.commons.text;StrTokenizer;false;clone;;;Argument[-1];ReturnValue;taint" ,
257
227
"org.apache.commons.text;StrTokenizer;false;toString;;;Argument[-1];ReturnValue;taint" ,
@@ -279,31 +249,9 @@ private class ApacheStrTokenizerModel extends SummaryModelCsv {
279
249
"org.apache.commons.text;StringTokenizer;false;previousToken;;;Argument[-1];ReturnValue;taint" ,
280
250
"org.apache.commons.text;StringTokenizer;false;nextToken;;;Argument[-1];ReturnValue;taint" ,
281
251
"org.apache.commons.text;StringTokenizer;false;getTSVInstance;;;Argument[0];ReturnValue;taint" ,
282
- "org.apache.commons.text;StringTokenizer;false;getCSVInstance;;;Argument[0];ReturnValue;taint"
283
- ]
284
- }
285
- }
286
-
287
- /**
288
- * Taint-propagating models for `StrLookup`.
289
- */
290
- private class ApacheStrLookupModel extends SummaryModelCsv {
291
- override predicate row ( string row ) {
292
- row =
293
- [
252
+ "org.apache.commons.text;StringTokenizer;false;getCSVInstance;;;Argument[0];ReturnValue;taint" ,
294
253
"org.apache.commons.text.lookup;StringLookup;true;lookup;;;Argument[-1];ReturnValue;taint" ,
295
- "org.apache.commons.text.lookup;StringLookupFactory;false;mapStringLookup;;;MapValue of Argument[0];ReturnValue;taint"
296
- ]
297
- }
298
- }
299
-
300
- /**
301
- * Taint-propagating models for `StrSubstitutor`.
302
- */
303
- private class ApacheStrSubstitutorModel extends SummaryModelCsv {
304
- override predicate row ( string row ) {
305
- row =
306
- [
254
+ "org.apache.commons.text.lookup;StringLookupFactory;false;mapStringLookup;;;MapValue of Argument[0];ReturnValue;taint" ,
307
255
"org.apache.commons.text;StringSubstitutor;false;StringSubstitutor;;;Argument[0];Argument[-1];taint" ,
308
256
"org.apache.commons.text;StringSubstitutor;false;StringSubstitutor;;;MapValue of Argument[0];Argument[-1];taint" ,
309
257
"org.apache.commons.text;StringSubstitutor;false;replace;;;Argument[-1];ReturnValue;taint" ,
0 commit comments