@@ -10,10 +10,8 @@ import semmle.code.java.security.InsecureLdapAuth
1010 * A taint-tracking configuration for `ldap://` URL in LDAP authentication.
1111 */
1212private module InsecureUrlFlowConfig implements DataFlow:: ConfigSig {
13- /** Source of `ldap://` connection string. */
1413 predicate isSource ( DataFlow:: Node src ) { src .asExpr ( ) instanceof InsecureLdapUrl }
1514
16- /** Sink of directory context creation. */
1715 predicate isSink ( DataFlow:: Node sink ) {
1816 exists ( ConstructorCall cc |
1917 cc .getConstructedType ( ) .getAnAncestor ( ) instanceof TypeDirContext and
@@ -37,14 +35,12 @@ module InsecureUrlFlowConfiguration = TaintTracking::Make<InsecureUrlFlowConfig>
3735 * A taint-tracking configuration for `simple` basic-authentication in LDAP configuration.
3836 */
3937private module BasicAuthFlowConfig implements DataFlow:: ConfigSig {
40- /** Source of `simple` configuration. */
4138 predicate isSource ( DataFlow:: Node src ) {
4239 exists ( MethodAccess ma |
4340 isBasicAuthEnv ( ma ) and ma .getQualifier ( ) = src .( PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
4441 )
4542 }
4643
47- /** Sink of directory context creation. */
4844 predicate isSink ( DataFlow:: Node sink ) {
4945 exists ( ConstructorCall cc |
5046 cc .getConstructedType ( ) .getAnAncestor ( ) instanceof TypeDirContext and
@@ -59,14 +55,12 @@ module BasicAuthFlowConfiguration = DataFlow::Make<BasicAuthFlowConfig>;
5955 * A taint-tracking configuration for `ssl` configuration in LDAP authentication.
6056 */
6157private module SslFlowConfig implements DataFlow:: ConfigSig {
62- /** Source of `ssl` configuration. */
6358 predicate isSource ( DataFlow:: Node src ) {
6459 exists ( MethodAccess ma |
6560 isSslEnv ( ma ) and ma .getQualifier ( ) = src .( PostUpdateNode ) .getPreUpdateNode ( ) .asExpr ( )
6661 )
6762 }
6863
69- /** Sink of directory context creation. */
7064 predicate isSink ( DataFlow:: Node sink ) {
7165 exists ( ConstructorCall cc |
7266 cc .getConstructedType ( ) .getAnAncestor ( ) instanceof TypeDirContext and
0 commit comments