Skip to content

Commit c87c3e3

Browse files
Jami CogswellJami Cogswell
authored andcommitted
Java: update getInvalidModelKind with 'read-file' kind
1 parent 2d7e71d commit c87c3e3

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -261,9 +261,9 @@ module ModelValidation {
261261
[
262262
"open-url", "jndi-injection", "ldap", "sql", "jdbc-url", "logging", "mvel", "xpath",
263263
"groovy", "xss", "ognl-injection", "intent-start", "pending-intent-sent",
264-
"url-open-stream", "url-redirect", "create-file", "write-file", "set-hostname-verifier",
265-
"header-splitting", "information-leak", "xslt", "jexl", "bean-validation", "ssti",
266-
"fragment-injection"
264+
"url-open-stream", "url-redirect", "create-file", "read-file", "write-file",
265+
"set-hostname-verifier", "header-splitting", "information-leak", "xslt", "jexl",
266+
"bean-validation", "ssti", "fragment-injection"
267267
] and
268268
not kind.matches("regex-use%") and
269269
not kind.matches("qltest%") and

0 commit comments

Comments
 (0)