Remove XSS sink for Java

pwntester · pwntester · commit 706874491bf8 · 2021-05-28T15:13:18.000+02:00
diff --git a/java/ql/src/semmle/code/java/security/XSS.qll b/java/ql/src/semmle/code/java/security/XSS.qll
@@ -34,7 +34,6 @@ private class DefaultXssSinkModel extends SinkModelCsv {
   override predicate row(string row) {
     row =
       [
-        "javax.servlet.http;HttpServletResponse;false;sendError;(int,String);;Argument[1];xss",
         "android.webkit;WebView;false;loadData;;;Argument[0];xss",
         "android.webkit;WebView;false;loadUrl;;;Argument[0];xss",
         "android.webkit;WebView;false;loadDataWithBaseURL;;;Argument[1];xss"

Original file line number	Diff line number	Diff line change
`@@ -34,7 +34,6 @@ private class DefaultXssSinkModel extends SinkModelCsv {`
`34`	`34`	`override predicate row(string row) {`
`35`	`35`	`row =`
`36`	`36`	`[`
`37`		`- "javax.servlet.http;HttpServletResponse;false;sendError;(int,String);;Argument[1];xss",`
`38`	`37`	`"android.webkit;WebView;false;loadData;;;Argument[0];xss",`
`39`	`38`	`"android.webkit;WebView;false;loadUrl;;;Argument[0];xss",`
`40`	`39`	`"android.webkit;WebView;false;loadDataWithBaseURL;;;Argument[1];xss"`