File tree Expand file tree Collapse file tree 2 files changed +2
-2
lines changed
java/ql/src/experimental/Security/CWE/CWE-917 Expand file tree Collapse file tree 2 files changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -27,7 +27,7 @@ and validate the expressions before evaluation.</p>
27
27
</example >
28
28
29
29
<references >
30
- <li >OGNL library: <a href =" https://github.com/jkuhnert/ognl/" >OGNL library</a >.</li >
30
+ <li ><a href =" https://github.com/jkuhnert/ognl/" >OGNL library</a >.</li >
31
31
<li >Struts security: <a href =" https://struts.apache.org/security/#proactively-protect-from-ognl-expression-injections-attacks-if-easily-applicable" >Proactively protect from OGNL Expression Injections attacks</a >.</li >
32
32
</references >
33
33
</qhelp >
Original file line number Diff line number Diff line change @@ -49,7 +49,7 @@ class TypeOgnlUtil extends Class {
49
49
*/
50
50
predicate ognlSinkMethod ( Method m , int index ) {
51
51
(
52
- m .getDeclaringType ( ) instanceof TypeOgnl and index = 0
52
+ m .getDeclaringType ( ) instanceof TypeOgnl
53
53
or
54
54
m .getDeclaringType ( ) .getAnAncestor * ( ) instanceof TypeNode
55
55
) and
You can’t perform that action at this time.
0 commit comments