File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
java/ql/src/experimental/Security/CWE/CWE-352 Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -47,8 +47,8 @@ class SpringControllerRequestMappingGetMethod extends SpringControllerGetMethod
47
47
.getType ( )
48
48
.hasQualifiedName ( "org.springframework.web.bind.annotation" , "RequestMapping" ) and
49
49
(
50
- this .getAnAnnotation ( ) .getEnumConstantValue ( "method" ) .getName ( ) = "GET" or
51
- this .getAnAnnotation ( ) .getValue ( "method" ) . ( ArrayInit ) . getSize ( ) = 0 //Java code example: @RequestMapping(value = "test")
50
+ this .getAnAnnotation ( ) .getAnEnumConstantArrayValue ( "method" ) .getName ( ) = "GET" or
51
+ not exists ( this .getAnAnnotation ( ) .getAnArrayValue ( "method" ) ) //Java code example: @RequestMapping(value = "test")
52
52
) and
53
53
not this .getAParamType ( ) .getName ( ) = "MultipartFile"
54
54
}
You can’t perform that action at this time.
0 commit comments