@@ -14,57 +14,57 @@ import semmle.code.java.dataflow.DataFlow
14
14
15
15
/** The interface `io.jsonwebtoken.JwtParser`. */
16
16
class TypeJwtParser extends Interface {
17
- TypeJwtParser ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtParser" ) }
17
+ TypeJwtParser ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtParser" ) }
18
18
}
19
19
20
20
/** The interface `io.jsonwebtoken.JwtParserBuilder`. */
21
21
class TypeJwtParserBuilder extends Interface {
22
- TypeJwtParserBuilder ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtParserBuilder" ) }
22
+ TypeJwtParserBuilder ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtParserBuilder" ) }
23
23
}
24
24
25
25
/** The interface `io.jsonwebtoken.JwtHandler`. */
26
26
class TypeJwtHandler extends Interface {
27
- TypeJwtHandler ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtHandler" ) }
27
+ TypeJwtHandler ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtHandler" ) }
28
28
}
29
29
30
30
/** The class `io.jsonwebtoken.JwtHandlerAdapter`. */
31
31
class TypeJwtHandlerAdapter extends Class {
32
- TypeJwtHandlerAdapter ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtHandlerAdapter" ) }
32
+ TypeJwtHandlerAdapter ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtHandlerAdapter" ) }
33
33
}
34
34
35
35
/** The `parse(token, handler)` method defined in `TypeJwtParser`. */
36
36
private class JwtParserParseHandlerMethod extends Method {
37
37
JwtParserParseHandlerMethod ( ) {
38
- hasName ( "parse" ) and
39
- getDeclaringType ( ) instanceof TypeJwtParser and
40
- getNumberOfParameters ( ) = 2
38
+ this . hasName ( "parse" ) and
39
+ this . getDeclaringType ( ) instanceof TypeJwtParser and
40
+ this . getNumberOfParameters ( ) = 2
41
41
}
42
42
}
43
43
44
44
/** The `parse(token)`, `parseClaimsJwt(token)` and `parsePlaintextJwt(token)` methods defined in `TypeJwtParser`. */
45
45
private class JwtParserInsecureParseMethods extends Method {
46
46
JwtParserInsecureParseMethods ( ) {
47
- hasName ( [ "parse" , "parseClaimsJwt" , "parsePlaintextJwt" ] ) and
48
- getNumberOfParameters ( ) = 1 and
49
- getDeclaringType ( ) instanceof TypeJwtParser
47
+ this . hasName ( [ "parse" , "parseClaimsJwt" , "parsePlaintextJwt" ] ) and
48
+ this . getNumberOfParameters ( ) = 1 and
49
+ this . getDeclaringType ( ) instanceof TypeJwtParser
50
50
}
51
51
}
52
52
53
53
/** The `onClaimsJwt(jwt)` and `onPlaintextJwt(jwt)` methods defined in `TypeJwtHandler`. */
54
54
private class JwtHandlerOnJwtMethods extends Method {
55
55
JwtHandlerOnJwtMethods ( ) {
56
- hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
57
- getNumberOfParameters ( ) = 1 and
58
- getDeclaringType ( ) instanceof TypeJwtHandler
56
+ this . hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
57
+ this . getNumberOfParameters ( ) = 1 and
58
+ this . getDeclaringType ( ) instanceof TypeJwtHandler
59
59
}
60
60
}
61
61
62
62
/** The `onClaimsJwt(jwt)` and `onPlaintextJwt(jwt)` methods defined in `TypeJwtHandlerAdapter`. */
63
63
private class JwtHandlerAdapterOnJwtMethods extends Method {
64
64
JwtHandlerAdapterOnJwtMethods ( ) {
65
- hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
66
- getNumberOfParameters ( ) = 1 and
67
- getDeclaringType ( ) instanceof TypeJwtHandlerAdapter
65
+ this . hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
66
+ this . getNumberOfParameters ( ) = 1 and
67
+ this . getDeclaringType ( ) instanceof TypeJwtHandlerAdapter
68
68
}
69
69
}
70
70
@@ -92,9 +92,9 @@ private predicate isInsecureParseHandler(Expr parseHandlerExpr) {
92
92
*/
93
93
private class JwtParserInsecureParseMethodAccess extends MethodAccess {
94
94
JwtParserInsecureParseMethodAccess ( ) {
95
- getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserInsecureParseMethods
95
+ this . getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserInsecureParseMethods
96
96
or
97
- getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserParseHandlerMethod and
97
+ this . getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserParseHandlerMethod and
98
98
isInsecureParseHandler ( this .getArgument ( 1 ) )
99
99
}
100
100
}
0 commit comments