We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
java/exec-tainted-environment
1 parent 4088721 commit d1f6008Copy full SHA for d1f6008
java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
@@ -22,6 +22,10 @@ private module ProcessBuilderEnvironmentFlow = DataFlow::Global<ProcessBuilderEn
22
*/
23
abstract class ExecTaintedEnvironmentSanitizer extends DataFlow::Node { }
24
25
+private class ExternalExecTaintedEnvironmentSanitizer extends ExecTaintedEnvironmentSanitizer {
26
+ ExternalExecTaintedEnvironmentSanitizer() { barrierNode(this, "environment-injection") }
27
+}
28
+
29
/**
30
* A taint-tracking configuration that tracks flow from unvalidated data to an environment variable for a subprocess.
31
0 commit comments