File tree Expand file tree Collapse file tree 9 files changed +9
-9
lines changed
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree 9 files changed +9
-9
lines changed Original file line number Diff line number Diff line change @@ -62,7 +62,7 @@ deprecated class JexlInjectionConfig extends TaintTracking::Configuration {
6262 * that is used to construct and evaluate a JEXL expression.
6363 * It supports both JEXL 2 and 3.
6464 */
65- private module JexlInjectionConfig implements DataFlow:: ConfigSig {
65+ module JexlInjectionConfig implements DataFlow:: ConfigSig {
6666 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
6767
6868 predicate isSink ( DataFlow:: Node sink ) { sink instanceof JexlEvaluationSink }
Original file line number Diff line number Diff line change @@ -32,7 +32,7 @@ deprecated class JndiInjectionFlowConfig extends TaintTracking::Configuration {
3232/**
3333 * A taint-tracking configuration for unvalidated user input that is used in JNDI lookup.
3434 */
35- private module JndiInjectionFlowConfig implements DataFlow:: ConfigSig {
35+ module JndiInjectionFlowConfig implements DataFlow:: ConfigSig {
3636 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
3737
3838 predicate isSink ( DataFlow:: Node sink ) { sink instanceof JndiInjectionSink }
Original file line number Diff line number Diff line change @@ -31,7 +31,7 @@ deprecated class MvelInjectionFlowConfig extends TaintTracking::Configuration {
3131 * A taint-tracking configuration for unsafe user input
3232 * that is used to construct and evaluate a MVEL expression.
3333 */
34- private module MvelInjectionFlowConfig implements DataFlow:: ConfigSig {
34+ module MvelInjectionFlowConfig implements DataFlow:: ConfigSig {
3535 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
3636
3737 predicate isSink ( DataFlow:: Node sink ) { sink instanceof MvelEvaluationSink }
Original file line number Diff line number Diff line change @@ -28,7 +28,7 @@ deprecated class OgnlInjectionFlowConfig extends TaintTracking::Configuration {
2828/**
2929 * A taint-tracking configuration for unvalidated user input that is used in OGNL EL evaluation.
3030 */
31- private module OgnlInjectionFlowConfig implements DataFlow:: ConfigSig {
31+ module OgnlInjectionFlowConfig implements DataFlow:: ConfigSig {
3232 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
3333
3434 predicate isSink ( DataFlow:: Node sink ) { sink instanceof OgnlInjectionSink }
Original file line number Diff line number Diff line change @@ -28,7 +28,7 @@ deprecated class SpelInjectionConfig extends TaintTracking::Configuration {
2828 * A taint-tracking configuration for unsafe user input
2929 * that is used to construct and evaluate a SpEL expression.
3030 */
31- private module SpelInjectionConfig implements DataFlow:: ConfigSig {
31+ module SpelInjectionConfig implements DataFlow:: ConfigSig {
3232 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
3333
3434 predicate isSink ( DataFlow:: Node sink ) { sink instanceof SpelExpressionEvaluationSink }
Original file line number Diff line number Diff line change @@ -36,7 +36,7 @@ deprecated class QueryInjectionFlowConfig extends TaintTracking::Configuration {
3636/**
3737 * A taint-tracking configuration for unvalidated user input that is used in SQL queries.
3838 */
39- private module QueryInjectionFlowConfig implements DataFlow:: ConfigSig {
39+ module QueryInjectionFlowConfig implements DataFlow:: ConfigSig {
4040 predicate isSource ( DataFlow:: Node src ) { src instanceof RemoteFlowSource }
4141
4242 predicate isSink ( DataFlow:: Node sink ) { sink instanceof QueryInjectionSink }
Original file line number Diff line number Diff line change @@ -42,7 +42,7 @@ deprecated class TemplateInjectionFlowConfig extends TaintTracking::Configuratio
4242}
4343
4444/** A taint tracking configuration to reason about server-side template injection (SST) vulnerabilities */
45- private module TemplateInjectionFlowConfig implements DataFlow:: StateConfigSig {
45+ module TemplateInjectionFlowConfig implements DataFlow:: StateConfigSig {
4646 class FlowState = DataFlow:: FlowState ;
4747
4848 predicate isSource ( DataFlow:: Node source , FlowState state ) {
Original file line number Diff line number Diff line change @@ -30,7 +30,7 @@ deprecated class XsltInjectionFlowConfig extends TaintTracking::Configuration {
3030/**
3131 * A taint-tracking configuration for unvalidated user input that is used in XSLT transformation.
3232 */
33- private module XsltInjectionFlowConfig implements DataFlow:: ConfigSig {
33+ module XsltInjectionFlowConfig implements DataFlow:: ConfigSig {
3434 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
3535
3636 predicate isSink ( DataFlow:: Node sink ) { sink instanceof XsltInjectionSink }
Original file line number Diff line number Diff line change @@ -23,7 +23,7 @@ deprecated class RegexInjectionConfiguration extends TaintTracking::Configuratio
2323/**
2424 * A taint-tracking configuration for untrusted user input used to construct regular expressions.
2525 */
26- private module RegexInjectionConfig implements DataFlow:: ConfigSig {
26+ module RegexInjectionConfig implements DataFlow:: ConfigSig {
2727 predicate isSource ( DataFlow:: Node source ) { source instanceof RemoteFlowSource }
2828
2929 predicate isSink ( DataFlow:: Node sink ) { sink instanceof RegexInjectionSink }
You can’t perform that action at this time.
0 commit comments