File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change 11/** Provides dataflow configurations to reason about insecure LDAP authentication. */
22
33import java
4- import DataFlow
54import semmle.code.java.dataflow.DataFlow
65import semmle.code.java.dataflow.TaintTracking
6+ import semmle.code.java.frameworks.Jndi
77import semmle.code.java.security.InsecureLdapAuth
88
99/**
@@ -37,7 +37,7 @@ module InsecureLdapUrlFlow = TaintTracking::Make<InsecureLdapUrlConfig>;
3737private module BasicAuthConfig implements DataFlow:: ConfigSig {
3838 predicate isSource ( DataFlow:: Node src ) {
3939 exists ( MethodAccess ma |
40- isBasicAuthEnv ( ma ) and ma .getQualifier ( ) = src .( PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
40+ isBasicAuthEnv ( ma ) and ma .getQualifier ( ) = src .( DataFlow :: PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
4141 )
4242 }
4343
@@ -57,7 +57,7 @@ module BasicAuthFlow = DataFlow::Make<BasicAuthConfig>;
5757private module RequiresSslConfig implements DataFlow:: ConfigSig {
5858 predicate isSource ( DataFlow:: Node src ) {
5959 exists ( MethodAccess ma |
60- isSslEnv ( ma ) and ma .getQualifier ( ) = src .( PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
60+ isSslEnv ( ma ) and ma .getQualifier ( ) = src .( DataFlow :: PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
6161 )
6262 }
6363
You can’t perform that action at this time.
0 commit comments