Skip to content

Commit 328b69f

Browse files
authored
Update java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql
1 parent 5aeeb3a commit 328b69f

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

java/ql/src/experimental/Security/CWE/CWE-665/InsecureRmiJmxEnvironmentConfiguration.ql

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -52,9 +52,10 @@ class SafeFlow extends DataFlow::Configuration {
5252
private predicate putsCredentialtypesKey(Expr qualifier) {
5353
exists(MapPutCall put |
5454
put.getKey().(CompileTimeConstantExpr).getStringValue() =
55-
"jmx.remote.rmi.server.credential.types" or
56-
put.getKey().(CompileTimeConstantExpr).getStringValue() =
57-
"jmx.remote.rmi.server.credentials.filter.pattern" or
55+
["jmx.remote.rmi.server.credential.types",
56+
"jmx.remote.rmi.server.credentials.filter.pattern"]
57+
58+
or
5859
put.getKey()
5960
.(FieldAccess)
6061
.getField()

0 commit comments

Comments
 (0)