File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed
java/ql/src/experimental/Security/CWE/CWE-601 Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change @@ -82,8 +82,8 @@ private class SpringViewUrlRedirectSink extends SpringUrlRedirectSink {
82
82
*/
83
83
private class SpringResponseEntityUrlRedirectSink extends SpringUrlRedirectSink {
84
84
SpringResponseEntityUrlRedirectSink ( ) {
85
- // Find `new ResponseEntity<> (httpHeaders, ...)` or
86
- // `new ResponseEntity<> (..., httpHeaders, ...)` sinks
85
+ // Find `new ResponseEntity(httpHeaders, ...)` or
86
+ // `new ResponseEntity(..., httpHeaders, ...)` sinks
87
87
exists ( ClassInstanceExpr cie , Argument argument |
88
88
cie .getConstructedType ( ) instanceof SpringResponseEntity and
89
89
argument .getType ( ) instanceof SpringHttpHeaders and
@@ -96,8 +96,7 @@ private class SpringResponseEntityUrlRedirectSink extends SpringUrlRedirectSink
96
96
exists ( MethodAccess ma |
97
97
ma .getMethod ( )
98
98
.getDeclaringType ( )
99
- .hasQualifiedName ( "org.springframework.http" ,
100
- "ResponseEntity<>$HeadersBuilder<BodyBuilder>" ) and
99
+ .hasQualifiedName ( "org.springframework.http" , "ResponseEntity$HeadersBuilder<BodyBuilder>" ) and
101
100
ma .getMethod ( ) .getName ( ) in [ "headers" , "location" ] and
102
101
this .asExpr ( ) = ma .getArgument ( 0 )
103
102
)
You can’t perform that action at this time.
0 commit comments