File tree 1 file changed +3
-0
lines changed
java/ql/lib/semmle/code/java/security
1 file changed +3
-0
lines changed Original file line number Diff line number Diff line change @@ -723,6 +723,7 @@ private class ExplicitlySafeXmlReaderFlowConfig extends DataFlow3::Configuration
723
723
override int fieldFlowBranchLimit ( ) { result = 0 }
724
724
}
725
725
726
+ /** An argument to a safe XML reader. */
726
727
class SafeXmlReaderFlowSink extends Expr {
727
728
SafeXmlReaderFlowSink ( ) {
728
729
this = any ( XmlReaderParse p ) .getQualifier ( ) or
@@ -767,6 +768,7 @@ class ExplicitlySafeXmlReader extends VarAccess {
767
768
)
768
769
}
769
770
771
+ /** Holds if `SafeXmlReaderFlowSink` detects flow from this to `sink` */
770
772
predicate flowsTo ( SafeXmlReaderFlowSink sink ) {
771
773
any ( ExplicitlySafeXmlReaderFlowConfig conf )
772
774
.hasFlow ( DataFlow:: exprNode ( this ) , DataFlow:: exprNode ( sink ) )
@@ -810,6 +812,7 @@ class CreatedSafeXmlReader extends Call {
810
812
)
811
813
}
812
814
815
+ /** Holds if `CreatedSafeXmlReaderFlowConfig` detects flow from this to `sink` */
813
816
predicate flowsTo ( SafeXmlReaderFlowSink sink ) {
814
817
any ( CreatedSafeXmlReaderFlowConfig conf )
815
818
.hasFlow ( DataFlow:: exprNode ( this ) , DataFlow:: exprNode ( sink ) )
You can’t perform that action at this time.
0 commit comments