[DIFF-INFORMED] Java: InsecureCookie

d10c · d10c · commit fedcbfedc05d · 2025-07-17T14:33:53.000+02:00
https://github.com/d10c/codeql/blob/d10c/diff-informed-phase-3/java/ql/src/Security/CWE/CWE-614/InsecureCookie.ql#L21
diff --git a/java/ql/lib/semmle/code/java/security/InsecureCookieQuery.qll b/java/ql/lib/semmle/code/java/security/InsecureCookieQuery.qll
@@ -35,6 +35,10 @@ module SecureCookieConfig implements DataFlow::ConfigSig {
     sink.asExpr() =
       any(MethodCall add | add.getMethod() instanceof ResponseAddCookieMethod).getArgument(0)
   }
+
+  predicate observeDiffInformedIncrementalMode() {
+    none() // only used negatively in InsecureCookie.ql
+  }
 }
 
 /** Data flow to reason about the failure to use secure cookies. */

Original file line number	Diff line number	Diff line change
`@@ -35,6 +35,10 @@ module SecureCookieConfig implements DataFlow::ConfigSig {`
`35`	`35`	`sink.asExpr() =`
`36`	`36`	`any(MethodCall add \| add.getMethod() instanceof ResponseAddCookieMethod).getArgument(0)`
`37`	`37`	`}`
	`38`	`+`
	`39`	`+ predicate observeDiffInformedIncrementalMode() {`
	`40`	`+ none() // only used negatively in InsecureCookie.ql`
	`41`	`+ }`
`38`	`42`	`}`
`39`	`43`
`40`	`44`	`/** Data flow to reason about the failure to use secure cookies. */`