Skip to content

Commit caa6f00

Browse files
Switch to CSV based modelling
1 parent e13c779 commit caa6f00

File tree

5 files changed

+165
-213
lines changed

5 files changed

+165
-213
lines changed

java/ql/src/semmle/code/java/dataflow/ExternalFlow.qll

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,14 @@ import java
6464
private import semmle.code.java.dataflow.DataFlow::DataFlow
6565
private import internal.DataFlowPrivate
6666

67+
/**
68+
* A module importing the frameworks that provide external flow data,
69+
* ensuring that they are visible to the taint tracking / data flow library.
70+
*/
71+
private module Frameworks {
72+
private import semmle.code.java.frameworks.ApacheHttp
73+
}
74+
6775
private predicate sourceModelCsv(string row) {
6876
row =
6977
[

java/ql/src/semmle/code/java/dataflow/FlowSources.qll

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -163,14 +163,6 @@ private class GuiceRequestParameterSource extends RemoteFlowSource {
163163
override string getSourceType() { result = "Guice request parameter" }
164164
}
165165

166-
private class ApacheHttpRequestParameterSource extends RemoteFlowSource {
167-
ApacheHttpRequestParameterSource() {
168-
this.asParameter() instanceof ApacheHttpRequestHandlerParameter
169-
}
170-
171-
override string getSourceType() { result = "Apache HTTP request parameter" }
172-
}
173-
174166
private class Struts2ActionSupportClassFieldReadSource extends RemoteFlowSource {
175167
Struts2ActionSupportClassFieldReadSource() {
176168
exists(Struts2ActionSupportClass c |

java/ql/src/semmle/code/java/dataflow/FlowSteps.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ private import semmle.code.java.dataflow.DataFlow
99
* A module importing the frameworks that implement additional flow steps,
1010
* ensuring that they are visible to the taint tracking library.
1111
*/
12-
module Frameworks {
12+
private module Frameworks {
1313
private import semmle.code.java.frameworks.jackson.JacksonSerializability
1414
private import semmle.code.java.frameworks.android.Intent
1515
private import semmle.code.java.frameworks.android.SQLite

0 commit comments

Comments
 (0)