File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed
semmle/code/java/dataflow Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -50,7 +50,7 @@ class TrustAllHostnameVerifierConfiguration extends DataFlow::Configuration {
50
50
source .asExpr ( ) .( ClassInstanceExpr ) .getConstructedType ( ) instanceof TrustAllHostnameVerifier
51
51
}
52
52
53
- override predicate isSink ( DataFlow:: Node sink ) { sinkNode ( sink , "set-hostname" ) }
53
+ override predicate isSink ( DataFlow:: Node sink ) { sinkNode ( sink , "set-hostname-verifier " ) }
54
54
55
55
override predicate isBarrier ( DataFlow:: Node barrier ) {
56
56
// ignore nodes that are in functions that intentionally disable hostname verification
Original file line number Diff line number Diff line change @@ -209,8 +209,8 @@ private predicate sinkModelCsv(string row) {
209
209
// Bean validation
210
210
"javax.validation;ConstraintValidatorContext;true;buildConstraintViolationWithTemplate;;;Argument[0];bean-validation" ,
211
211
// Set hostname
212
- "javax.net.ssl;HttpsURLConnection;true;setDefaultHostnameVerifier;;;Argument[0];set-hostname" ,
213
- "javax.net.ssl;HttpsURLConnection;true;setHostnameVerifier;;;Argument[0];set-hostname"
212
+ "javax.net.ssl;HttpsURLConnection;true;setDefaultHostnameVerifier;;;Argument[0];set-hostname-verifier " ,
213
+ "javax.net.ssl;HttpsURLConnection;true;setHostnameVerifier;;;Argument[0];set-hostname-verifier "
214
214
]
215
215
}
216
216
You can’t perform that action at this time.
0 commit comments