Skip to content

Commit d468ea9

Browse files
committed
Add default sanitizers
1 parent b305962 commit d468ea9

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,10 @@ module TrustBoundaryConfig implements DataFlow::ConfigSig {
5555

5656
predicate isBarrier(DataFlow::Node node) {
5757
node instanceof TrustBoundaryValidationSanitizer or
58-
node.getType() instanceof HttpServletSession
58+
node.getType() instanceof HttpServletSession or
59+
node.getType() instanceof NumberType or
60+
node.getType() instanceof PrimitiveType or
61+
node.getType() instanceof BoxedType
5962
}
6063

6164
predicate isSink(DataFlow::Node sink) { sink instanceof TrustBoundaryViolationSink }

0 commit comments

Comments
 (0)