Java: Diff-informed SqlTainted.ql

jbj · jbj · commit eac1a4c002d2 · 2024-12-20T11:22:57.000+01:00
diff --git a/java/ql/lib/semmle/code/java/security/SqlInjectionQuery.qll b/java/ql/lib/semmle/code/java/security/SqlInjectionQuery.qll
@@ -24,6 +24,8 @@ module QueryInjectionFlowConfig implements DataFlow::ConfigSig {
   predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {
     any(AdditionalQueryInjectionTaintStep s).step(node1, node2)
   }
+
+  predicate observeDiffInformedIncrementalMode() { any() }
 }
 
 /** Tracks flow of unvalidated user input that is used in SQL queries. */

Original file line number	Diff line number	Diff line change
`@@ -24,6 +24,8 @@ module QueryInjectionFlowConfig implements DataFlow::ConfigSig {`
`24`	`24`	`predicate isAdditionalFlowStep(DataFlow::Node node1, DataFlow::Node node2) {`
`25`	`25`	`any(AdditionalQueryInjectionTaintStep s).step(node1, node2)`
`26`	`26`	`}`
	`27`	`+`
	`28`	`+ predicate observeDiffInformedIncrementalMode() { any() }`
`27`	`29`	`}`
`28`	`30`
`29`	`31`	`/** Tracks flow of unvalidated user input that is used in SQL queries. */`