File tree Expand file tree Collapse file tree 1 file changed +0
-10
lines changed
java/ql/src/experimental/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +0
-10
lines changed Original file line number Diff line number Diff line change @@ -102,16 +102,6 @@ class CodeInjectionConfiguration extends TaintTracking::Configuration {
102
102
override predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
103
103
104
104
override predicate isSink ( DataFlow:: Node sink ) { sink instanceof CodeInjectionSink }
105
-
106
- override predicate isAdditionalTaintStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
107
- // @RequestBody MyQueryObj query; interpreter.exec(query.getInterpreterCode());
108
- exists ( MethodAccess ma |
109
- ma .getMethod ( ) .getDeclaringType ( ) .getASubtype * ( ) instanceof SpringUntrustedDataType and
110
- not ma .getMethod ( ) .getDeclaringType ( ) instanceof TypeObject and
111
- ma .getQualifier ( ) = node1 .asExpr ( ) and
112
- ma = node2 .asExpr ( )
113
- )
114
- }
115
105
}
116
106
117
107
from DataFlow:: PathNode source , DataFlow:: PathNode sink , CodeInjectionConfiguration conf
You can’t perform that action at this time.
0 commit comments