File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change 1
1
/** Provides dataflow configurations to reason about insecure LDAP authentication. */
2
2
3
3
import java
4
- import DataFlow
5
4
import semmle.code.java.dataflow.DataFlow
6
5
import semmle.code.java.dataflow.TaintTracking
6
+ import semmle.code.java.frameworks.Jndi
7
7
import semmle.code.java.security.InsecureLdapAuth
8
8
9
9
/**
@@ -37,7 +37,7 @@ module InsecureLdapUrlFlow = TaintTracking::Make<InsecureLdapUrlConfig>;
37
37
private module BasicAuthConfig implements DataFlow:: ConfigSig {
38
38
predicate isSource ( DataFlow:: Node src ) {
39
39
exists ( MethodAccess ma |
40
- isBasicAuthEnv ( ma ) and ma .getQualifier ( ) = src .( PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
40
+ isBasicAuthEnv ( ma ) and ma .getQualifier ( ) = src .( DataFlow :: PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
41
41
)
42
42
}
43
43
@@ -57,7 +57,7 @@ module BasicAuthFlow = DataFlow::Make<BasicAuthConfig>;
57
57
private module RequiresSslConfig implements DataFlow:: ConfigSig {
58
58
predicate isSource ( DataFlow:: Node src ) {
59
59
exists ( MethodAccess ma |
60
- isSslEnv ( ma ) and ma .getQualifier ( ) = src .( PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
60
+ isSslEnv ( ma ) and ma .getQualifier ( ) = src .( DataFlow :: PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
61
61
)
62
62
}
63
63
You can’t perform that action at this time.
0 commit comments