File tree Expand file tree Collapse file tree 1 file changed +5
-7
lines changed
java/ql/src/semmle/code/java/frameworks Expand file tree Collapse file tree 1 file changed +5
-7
lines changed Original file line number Diff line number Diff line change @@ -308,11 +308,9 @@ class JaxRSProducesAnnotation extends JaxRSAnnotation {
308
308
* Gets a declared content type that can be produced by this resource.
309
309
*/
310
310
Expr getADeclaredContentTypeExpr ( ) {
311
- (
312
- result = this .getAValue ( ) and not result instanceof ArrayInit
313
- or
314
- result = this .getAValue ( ) .( ArrayInit ) .getAnInit ( )
315
- )
311
+ result = this .getAValue ( ) and not result instanceof ArrayInit
312
+ or
313
+ result = this .getAValue ( ) .( ArrayInit ) .getAnInit ( )
316
314
}
317
315
}
318
316
@@ -823,7 +821,7 @@ private predicate isXssSafeContentTypeExpr(Expr e) { isXssSafeContentType(getCon
823
821
* This could be an instance of `Response.ResponseBuilder`, `Variant`, `Variant.VariantListBuilder` or
824
822
* a `List<Variant>`.
825
823
*
826
- * This routine is used to search forwards for response entities set after the content-type is configured.
824
+ * This predicate is used to search forwards for response entities set after the content-type is configured.
827
825
* It does not need to consider cases where the entity is set in the same call, or the entity has already
828
826
* been set: these are handled by simple sanitization below.
829
827
*/
@@ -882,7 +880,7 @@ private DataFlow::Node getABuilderWithExplicitContentType(Expr contentType) {
882
880
)
883
881
or
884
882
// Recursive case: ordinary local dataflow
885
- DataFlow:: localFlow ( getABuilderWithExplicitContentType ( contentType ) , result )
883
+ DataFlow:: localFlowStep ( getABuilderWithExplicitContentType ( contentType ) , result )
886
884
}
887
885
888
886
private DataFlow:: Node getASanitizedBuilder ( ) {
You can’t perform that action at this time.
0 commit comments