We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b147be6 commit b3bb4cbCopy full SHA for b3bb4cb
java/ql/src/semmle/code/java/security/ResponseSplitting.qll
@@ -40,9 +40,9 @@ private class ServletHeaderSplittingSink extends HeaderSplittingSink {
40
}
41
42
43
-/** Servlet sources considered safe regarding header splitting */
44
-private class ServletSafeHeaderSplittingSource extends SafeHeaderSplittingSource {
45
- ServletSafeHeaderSplittingSource() {
+/** Sources of data considered safe to use by header splitting sinks. */
+private class DefaultSafeHeaderSplittingSource extends SafeHeaderSplittingSource {
+ DefaultSafeHeaderSplittingSource() {
46
this.asExpr().(MethodAccess).getMethod() instanceof HttpServletRequestGetHeaderMethod or
47
this.asExpr().(MethodAccess).getMethod() instanceof CookieGetNameMethod
48
0 commit comments