@@ -784,7 +784,7 @@ class TransformerFactorySource extends XmlParserCall {
784
784
override Expr getSink ( ) { result = this .getArgument ( 0 ) }
785
785
786
786
override predicate isSafe ( ) {
787
- SafeTransformerFactoryFlow2 :: flowsTo ( DataFlow:: exprNode ( this .getQualifier ( ) ) )
787
+ SafeTransformerFactoryFlow :: flowsTo ( DataFlow:: exprNode ( this .getQualifier ( ) ) )
788
788
}
789
789
}
790
790
@@ -803,7 +803,7 @@ private predicate safeTransformerFactoryNode(DataFlow::Node src) {
803
803
src .asExpr ( ) instanceof SafeTransformerFactory
804
804
}
805
805
806
- private module SafeTransformerFactoryFlow2 = DataFlow:: SimpleGlobal< safeTransformerFactoryNode / 1 > ;
806
+ private module SafeTransformerFactoryFlow = DataFlow:: SimpleGlobal< safeTransformerFactoryNode / 1 > ;
807
807
808
808
/** A safely configured `TransformerFactory`. */
809
809
class SafeTransformerFactory extends VarAccess {
@@ -826,7 +826,7 @@ class SafeTransformer extends MethodCall {
826
826
this .getMethod ( ) = m and
827
827
m .getDeclaringType ( ) instanceof TransformerFactory and
828
828
m .hasName ( "newTransformer" ) and
829
- SafeTransformerFactoryFlow2 :: flowsTo ( DataFlow:: exprNode ( this .getQualifier ( ) ) )
829
+ SafeTransformerFactoryFlow :: flowsTo ( DataFlow:: exprNode ( this .getQualifier ( ) ) )
830
830
)
831
831
}
832
832
}
@@ -849,7 +849,7 @@ class SaxTransformerFactoryNewXmlFilter extends XmlParserCall {
849
849
override Expr getSink ( ) { result = this .getArgument ( 0 ) }
850
850
851
851
override predicate isSafe ( ) {
852
- SafeTransformerFactoryFlow2 :: flowsTo ( DataFlow:: exprNode ( this .getQualifier ( ) ) )
852
+ SafeTransformerFactoryFlow :: flowsTo ( DataFlow:: exprNode ( this .getQualifier ( ) ) )
853
853
}
854
854
}
855
855
0 commit comments