File tree Expand file tree Collapse file tree 1 file changed +9
-1
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +9
-1
lines changed Original file line number Diff line number Diff line change @@ -17,14 +17,22 @@ class JndiInjectionFlowConfig extends TaintTracking::Configuration {
17
17
override predicate isSink ( DataFlow:: Node sink ) { sink instanceof JndiInjectionSink }
18
18
19
19
override predicate isSanitizer ( DataFlow:: Node node ) {
20
- node .getType ( ) instanceof PrimitiveType or node .getType ( ) instanceof BoxedType
20
+ node .getType ( ) instanceof PrimitiveType or node .getType ( ) instanceof BoxedType
21
+ or
22
+ node instanceof JndiInjectionSanitizer
21
23
}
22
24
23
25
override predicate isAdditionalTaintStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
24
26
any ( JndiInjectionAdditionalTaintStep c ) .step ( node1 , node2 )
25
27
}
26
28
}
27
29
30
+ /**
31
+ * A Class to be extended for Sanitizer Customizations
32
+ */
33
+
34
+ abstract class JndiInjectionSanitizer extends DataFlow:: Node { }
35
+
28
36
/**
29
37
* A method that does a JNDI lookup when it receives a `SearchControls` argument with `setReturningObjFlag` = `true`
30
38
*/
You can’t perform that action at this time.
0 commit comments