File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -6,13 +6,13 @@ private import semmle.code.java.frameworks.Regex
6
6
private import semmle.code.java.frameworks.apache.Lang
7
7
8
8
/** A data flow sink for untrusted user input used to construct regular expressions. */
9
- abstract class Sink extends DataFlow:: ExprNode { }
9
+ abstract class RegexInjectionSink extends DataFlow:: ExprNode { }
10
10
11
11
/** A sanitizer for untrusted user input used to construct regular expressions. */
12
12
abstract class RegexInjectionSanitizer extends DataFlow:: ExprNode { }
13
13
14
- private class RegexInjectionSink extends Sink {
15
- RegexInjectionSink ( ) {
14
+ private class DefaultRegexInjectionSink extends RegexInjectionSink {
15
+ DefaultRegexInjectionSink ( ) {
16
16
exists ( MethodAccess ma , Method m | m = ma .getMethod ( ) |
17
17
ma .getArgument ( 0 ) = this .asExpr ( ) and
18
18
(
Original file line number Diff line number Diff line change @@ -11,7 +11,7 @@ class RegexInjectionConfiguration extends TaintTracking::Configuration {
11
11
12
12
override predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
13
13
14
- override predicate isSink ( DataFlow:: Node sink ) { sink instanceof Sink }
14
+ override predicate isSink ( DataFlow:: Node sink ) { sink instanceof RegexInjectionSink }
15
15
16
16
override predicate isSanitizer ( DataFlow:: Node node ) { node instanceof RegexInjectionSanitizer }
17
17
}
You can’t perform that action at this time.
0 commit comments