File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
java/ql/src/semmle/code/java/frameworks/jackson Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -156,15 +156,15 @@ class JacksonDeserializableField extends DeserializableField {
156
156
}
157
157
158
158
/** A call to a field that may be deserialized using the Jackson JSON framework. */
159
- class JacksonDeserializableFieldAccess extends FieldAccess {
159
+ private class JacksonDeserializableFieldAccess extends FieldAccess {
160
160
JacksonDeserializableFieldAccess ( ) { getField ( ) instanceof JacksonDeserializableField }
161
161
}
162
162
163
163
/**
164
164
* When an object is deserialized by the Jackson JSON framework using a tainted input source,
165
165
* the fields that the framework deserialized are themselves tainted input data.
166
166
*/
167
- class JacksonDeserializedTaintStep extends AdditionalTaintStep {
167
+ private class JacksonDeserializedTaintStep extends AdditionalTaintStep {
168
168
override predicate step ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
169
169
DataFlow:: getFieldQualifier ( node2 .asExpr ( ) .( JacksonDeserializableFieldAccess ) ) = node1
170
170
}
You can’t perform that action at this time.
0 commit comments