File tree Expand file tree Collapse file tree 1 file changed +5
-1
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +5
-1
lines changed Original file line number Diff line number Diff line change @@ -6,6 +6,7 @@ import semmle.code.java.security.PathSanitizer
6
6
private import semmle.code.java.dataflow.ExternalFlow
7
7
private import semmle.code.java.dataflow.FlowSources
8
8
private import semmle.code.java.security.PathCreation
9
+ private import semmle.code.java.security.Sanitizers
9
10
10
11
/**
11
12
* A method that returns the name of an archive entry.
@@ -39,7 +40,10 @@ module ZipSlipConfig implements DataFlow::ConfigSig {
39
40
40
41
predicate isSink ( DataFlow:: Node sink ) { sink instanceof FileCreationSink }
41
42
42
- predicate isBarrier ( DataFlow:: Node node ) { node instanceof PathInjectionSanitizer }
43
+ predicate isBarrier ( DataFlow:: Node node ) {
44
+ node instanceof SimpleTypeSanitizer or
45
+ node instanceof PathInjectionSanitizer
46
+ }
43
47
}
44
48
45
49
/** Tracks flow from archive entries to file creation. */
You can’t perform that action at this time.
0 commit comments