File tree Expand file tree Collapse file tree 1 file changed +5
-2
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +5
-2
lines changed Original file line number Diff line number Diff line change @@ -4,12 +4,15 @@ import java
4
4
private import semmle.code.java.dataflow.DataFlow
5
5
6
6
/**
7
- * A node whose type is a simple type unlikely to carry taint, such as primitives or their boxed counterparts.
7
+ * A node whose type is a simple type unlikely to carry taint, such as primitives and their boxed counterparts,
8
+ * `java.util.UUID` and `java.util.Date`.
8
9
*/
9
10
class SimpleTypeSanitizer extends DataFlow:: Node {
10
11
SimpleTypeSanitizer ( ) {
11
12
this .getType ( ) instanceof PrimitiveType or
12
13
this .getType ( ) instanceof BoxedType or
13
- this .getType ( ) instanceof NumberType
14
+ this .getType ( ) instanceof NumberType or
15
+ this .getType ( ) .( RefType ) .hasQualifiedName ( "java.util" , "UUID" ) or
16
+ this .getType ( ) .( RefType ) .hasQualifiedName ( "java.util" , "Date" )
14
17
}
15
18
}
You can’t perform that action at this time.
0 commit comments