File tree Expand file tree Collapse file tree 2 files changed +6
-0
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 2 files changed +6
-0
lines changed Original file line number Diff line number Diff line change @@ -11,6 +11,9 @@ import semmle.code.java.dataflow.FlowSources
11
11
import semmle.code.java.security.ExternalProcess
12
12
import semmle.code.java.security.CommandArguments
13
13
14
+ /**
15
+ * A taint-tracking configuration for unvalidated user input that is used to run an external process.
16
+ */
14
17
class RemoteUserInputToArgumentToExecFlowConfig extends TaintTracking:: Configuration {
15
18
RemoteUserInputToArgumentToExecFlowConfig ( ) {
16
19
this = "ExecCommon::RemoteUserInputToArgumentToExecFlowConfig"
Original file line number Diff line number Diff line change @@ -10,6 +10,9 @@ import java
10
10
import semmle.code.java.dataflow.FlowSources
11
11
import semmle.code.java.security.QueryInjection
12
12
13
+ /**
14
+ * A taint-tracking configuration for unvalidated user input that is used in SQL queries.
15
+ */
13
16
class QueryInjectionFlowConfig extends TaintTracking:: Configuration {
14
17
QueryInjectionFlowConfig ( ) { this = "SqlInjectionLib::QueryInjectionFlowConfig" }
15
18
You can’t perform that action at this time.
0 commit comments