File tree Expand file tree Collapse file tree 2 files changed +12
-0
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 2 files changed +12
-0
lines changed Original file line number Diff line number Diff line change @@ -24,6 +24,9 @@ deprecated class XxeLocalConfig extends TaintTracking::Configuration {
2424 }
2525}
2626
27+ /**
28+ * A taint-tracking configuration for unvalidated local user input that is used in XML external entity expansion.
29+ */
2730module XxeLocalConfig implements DataFlow:: ConfigSig {
2831 predicate isSource ( DataFlow:: Node src ) { src instanceof LocalUserInput }
2932
@@ -36,4 +39,7 @@ module XxeLocalConfig implements DataFlow::ConfigSig {
3639 }
3740}
3841
42+ /**
43+ * Detect taint flow of unvalidated local user input that is used in XML external entity expansion.
44+ */
3945module XxeLocalFlow = TaintTracking:: Make< XxeLocalConfig > ;
Original file line number Diff line number Diff line change @@ -24,6 +24,9 @@ deprecated class XxeConfig extends TaintTracking::Configuration {
2424 }
2525}
2626
27+ /**
28+ * A taint-tracking configuration for unvalidated remote user input that is used in XML external entity expansion.
29+ */
2730module XxeConfig implements DataFlow:: ConfigSig {
2831 predicate isSource ( DataFlow:: Node src ) { src instanceof RemoteFlowSource }
2932
@@ -36,4 +39,7 @@ module XxeConfig implements DataFlow::ConfigSig {
3639 }
3740}
3841
42+ /**
43+ * Detect taint flow of unvalidated remote user input that is used in XML external entity expansion.
44+ */
3945module XxeFlow = TaintTracking:: Make< XxeConfig > ;
You can’t perform that action at this time.
0 commit comments