File tree Expand file tree Collapse file tree 9 files changed +9
-9
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 9 files changed +9
-9
lines changed Original file line number Diff line number Diff line change @@ -62,7 +62,7 @@ deprecated class JexlInjectionConfig extends TaintTracking::Configuration {
62
62
* that is used to construct and evaluate a JEXL expression.
63
63
* It supports both JEXL 2 and 3.
64
64
*/
65
- private module JexlInjectionConfig implements DataFlow:: ConfigSig {
65
+ module JexlInjectionConfig implements DataFlow:: ConfigSig {
66
66
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
67
67
68
68
predicate isSink ( DataFlow:: Node sink ) { sink instanceof JexlEvaluationSink }
Original file line number Diff line number Diff line change @@ -32,7 +32,7 @@ deprecated class JndiInjectionFlowConfig extends TaintTracking::Configuration {
32
32
/**
33
33
* A taint-tracking configuration for unvalidated user input that is used in JNDI lookup.
34
34
*/
35
- private module JndiInjectionFlowConfig implements DataFlow:: ConfigSig {
35
+ module JndiInjectionFlowConfig implements DataFlow:: ConfigSig {
36
36
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
37
37
38
38
predicate isSink ( DataFlow:: Node sink ) { sink instanceof JndiInjectionSink }
Original file line number Diff line number Diff line change @@ -31,7 +31,7 @@ deprecated class MvelInjectionFlowConfig extends TaintTracking::Configuration {
31
31
* A taint-tracking configuration for unsafe user input
32
32
* that is used to construct and evaluate a MVEL expression.
33
33
*/
34
- private module MvelInjectionFlowConfig implements DataFlow:: ConfigSig {
34
+ module MvelInjectionFlowConfig implements DataFlow:: ConfigSig {
35
35
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
36
36
37
37
predicate isSink ( DataFlow:: Node sink ) { sink instanceof MvelEvaluationSink }
Original file line number Diff line number Diff line change @@ -28,7 +28,7 @@ deprecated class OgnlInjectionFlowConfig extends TaintTracking::Configuration {
28
28
/**
29
29
* A taint-tracking configuration for unvalidated user input that is used in OGNL EL evaluation.
30
30
*/
31
- private module OgnlInjectionFlowConfig implements DataFlow:: ConfigSig {
31
+ module OgnlInjectionFlowConfig implements DataFlow:: ConfigSig {
32
32
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
33
33
34
34
predicate isSink ( DataFlow:: Node sink ) { sink instanceof OgnlInjectionSink }
Original file line number Diff line number Diff line change @@ -28,7 +28,7 @@ deprecated class SpelInjectionConfig extends TaintTracking::Configuration {
28
28
* A taint-tracking configuration for unsafe user input
29
29
* that is used to construct and evaluate a SpEL expression.
30
30
*/
31
- private module SpelInjectionConfig implements DataFlow:: ConfigSig {
31
+ module SpelInjectionConfig implements DataFlow:: ConfigSig {
32
32
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
33
33
34
34
predicate isSink ( DataFlow:: Node sink ) { sink instanceof SpelExpressionEvaluationSink }
Original file line number Diff line number Diff line change @@ -36,7 +36,7 @@ deprecated class QueryInjectionFlowConfig extends TaintTracking::Configuration {
36
36
/**
37
37
* A taint-tracking configuration for unvalidated user input that is used in SQL queries.
38
38
*/
39
- private module QueryInjectionFlowConfig implements DataFlow:: ConfigSig {
39
+ module QueryInjectionFlowConfig implements DataFlow:: ConfigSig {
40
40
predicate isSource ( DataFlow:: Node src ) { src instanceof RemoteFlowSource }
41
41
42
42
predicate isSink ( DataFlow:: Node sink ) { sink instanceof QueryInjectionSink }
Original file line number Diff line number Diff line change @@ -42,7 +42,7 @@ deprecated class TemplateInjectionFlowConfig extends TaintTracking::Configuratio
42
42
}
43
43
44
44
/** A taint tracking configuration to reason about server-side template injection (SST) vulnerabilities */
45
- private module TemplateInjectionFlowConfig implements DataFlow:: StateConfigSig {
45
+ module TemplateInjectionFlowConfig implements DataFlow:: StateConfigSig {
46
46
class FlowState = DataFlow:: FlowState ;
47
47
48
48
predicate isSource ( DataFlow:: Node source , FlowState state ) {
Original file line number Diff line number Diff line change @@ -30,7 +30,7 @@ deprecated class XsltInjectionFlowConfig extends TaintTracking::Configuration {
30
30
/**
31
31
* A taint-tracking configuration for unvalidated user input that is used in XSLT transformation.
32
32
*/
33
- private module XsltInjectionFlowConfig implements DataFlow:: ConfigSig {
33
+ module XsltInjectionFlowConfig implements DataFlow:: ConfigSig {
34
34
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
35
35
36
36
predicate isSink ( DataFlow:: Node sink ) { sink instanceof XsltInjectionSink }
Original file line number Diff line number Diff line change @@ -23,7 +23,7 @@ deprecated class RegexInjectionConfiguration extends TaintTracking::Configuratio
23
23
/**
24
24
* A taint-tracking configuration for untrusted user input used to construct regular expressions.
25
25
*/
26
- private module RegexInjectionConfig implements DataFlow:: ConfigSig {
26
+ module RegexInjectionConfig implements DataFlow:: ConfigSig {
27
27
predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
28
28
29
29
predicate isSink ( DataFlow:: Node sink ) { sink instanceof RegexInjectionSink }
You can’t perform that action at this time.
0 commit comments