Add key-read-steps as local additional taint steps

atorralba · atorralba · commit 52f1930e1d89 · 2021-06-07T11:37:05.000+02:00
diff --git a/java/ql/src/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll b/java/ql/src/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll
@@ -69,6 +69,7 @@ private module Cached {
     |
       f instanceof ArrayContent or
       f instanceof CollectionContent or
+      f instanceof MapKeyContent or
       f instanceof MapValueContent
     )
     or

Original file line number	Diff line number	Diff line change
`@@ -69,6 +69,7 @@ private module Cached {`
`69`	`69`	`\|`
`70`	`70`	`f instanceof ArrayContent or`
`71`	`71`	`f instanceof CollectionContent or`
	`72`	`+ f instanceof MapKeyContent or`
`72`	`73`	`f instanceof MapValueContent`
`73`	`74`	`)`
`74`	`75`	`or`