Java: add taint steps for getResource sink

Jami Cogswell · Jami Cogswell · commit efa5ab18c17e · 2023-11-29T14:46:27.000-05:00
diff --git a/java/ql/lib/ext/org.springframework.cloud.config.server.environment.model.yml b/java/ql/lib/ext/org.springframework.cloud.config.server.environment.model.yml
@@ -0,0 +1,7 @@
+extensions:
+  - addsTo:
+      pack: codeql/java-all
+      extensible: summaryModel
+    data:
+      - ["org.springframework.cloud.config.server.environment", "SearchPathLocator", True, "getLocations", "(String,String,String)", "", "Argument[0..2]", "ReturnValue", "taint", "manual"]
+      - ["org.springframework.cloud.config.server.environment", "SearchPathLocator$Locations", True, "getLocations", "()", "", "Argument[this]", "ReturnValue", "taint", "manual"]
