Merge pull request #17023 from jcogs33/jcogs33/java/add-apache-ant-path-inj-sinks

Java: add apache-ant `Property` path injection sinks

Author: jcogs33

java/ql/lib/change-notes/2024-07-19-apache-ant-property-sinks.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Added path-injection sinks for `org.apache.tools.ant.taskdefs.Property.setFile` and `org.apache.tools.ant.taskdefs.Property.setResource`.

java/ql/lib/ext/org.apache.tools.ant.taskdefs.model.yml

@@ -10,3 +10,5 @@ extensions:
       - ["org.apache.tools.ant.taskdefs", "Execute", False, "runCommand", "(Task,String[])", "", "Argument[1]", "command-injection", "ai-manual"]
       - ["org.apache.tools.ant.taskdefs", "Expand", True, "setDest", "(File)", "", "Argument[0]", "path-injection", "ai-manual"]
       - ["org.apache.tools.ant.taskdefs", "Expand", True, "setSrc", "(File)", "", "Argument[0]", "path-injection", "ai-manual"]
+      - ["org.apache.tools.ant.taskdefs", "Property", True, "setFile", "(File)", "", "Argument[0]", "path-injection", "manual"]
+      - ["org.apache.tools.ant.taskdefs", "Property", True, "setResource", "(String)", "", "Argument[0]", "path-injection", "manual"]