We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b305962 commit d468ea9Copy full SHA for d468ea9
java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll
@@ -55,7 +55,10 @@ module TrustBoundaryConfig implements DataFlow::ConfigSig {
55
56
predicate isBarrier(DataFlow::Node node) {
57
node instanceof TrustBoundaryValidationSanitizer or
58
- node.getType() instanceof HttpServletSession
+ node.getType() instanceof HttpServletSession or
59
+ node.getType() instanceof NumberType or
60
+ node.getType() instanceof PrimitiveType or
61
+ node.getType() instanceof BoxedType
62
}
63
64
predicate isSink(DataFlow::Node sink) { sink instanceof TrustBoundaryViolationSink }
0 commit comments