File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -6,13 +6,13 @@ private import semmle.code.java.frameworks.Regex
66private import semmle.code.java.frameworks.apache.Lang
77
88/** A data flow sink for untrusted user input used to construct regular expressions. */
9- abstract class Sink extends DataFlow:: ExprNode { }
9+ abstract class RegexInjectionSink extends DataFlow:: ExprNode { }
1010
1111/** A sanitizer for untrusted user input used to construct regular expressions. */
1212abstract class RegexInjectionSanitizer extends DataFlow:: ExprNode { }
1313
14- private class RegexInjectionSink extends Sink {
15- RegexInjectionSink ( ) {
14+ private class DefaultRegexInjectionSink extends RegexInjectionSink {
15+ DefaultRegexInjectionSink ( ) {
1616 exists ( MethodAccess ma , Method m | m = ma .getMethod ( ) |
1717 ma .getArgument ( 0 ) = this .asExpr ( ) and
1818 (
Original file line number Diff line number Diff line change @@ -11,7 +11,7 @@ class RegexInjectionConfiguration extends TaintTracking::Configuration {
1111
1212 override predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
1313
14- override predicate isSink ( DataFlow:: Node sink ) { sink instanceof Sink }
14+ override predicate isSink ( DataFlow:: Node sink ) { sink instanceof RegexInjectionSink }
1515
1616 override predicate isSanitizer ( DataFlow:: Node node ) { node instanceof RegexInjectionSanitizer }
1717}
You can’t perform that action at this time.
0 commit comments