Skip to content

Commit d1f6008

Browse files
committed
Allow MaD sanitizers for java/exec-tainted-environment
1 parent 4088721 commit d1f6008

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,10 @@ private module ProcessBuilderEnvironmentFlow = DataFlow::Global<ProcessBuilderEn
2222
*/
2323
abstract class ExecTaintedEnvironmentSanitizer extends DataFlow::Node { }
2424

25+
private class ExternalExecTaintedEnvironmentSanitizer extends ExecTaintedEnvironmentSanitizer {
26+
ExternalExecTaintedEnvironmentSanitizer() { barrierNode(this, "environment-injection") }
27+
}
28+
2529
/**
2630
* A taint-tracking configuration that tracks flow from unvalidated data to an environment variable for a subprocess.
2731
*/

0 commit comments

Comments
 (0)