File tree Expand file tree Collapse file tree 1 file changed +11
-0
lines changed
java/ql/src/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Original file line number Diff line number Diff line change @@ -14,6 +14,9 @@ import semmle.code.java.dataflow.TaintTracking
1414import semmle.code.java.dataflow.FlowSources
1515import DataFlow:: PathGraph
1616
17+ /**
18+ * A message interpolator Type that perform Expression Language (EL) evaluations
19+ */
1720class ELMessageInterpolatorType extends RefType {
1821 ELMessageInterpolatorType ( ) {
1922 this
@@ -46,6 +49,10 @@ class SetSafeMessageInterpolatorCall extends MethodAccess {
4649 }
4750}
4851
52+ /**
53+ * A method named `buildConstraintViolationWithTemplate` declared on a subtype
54+ * of `javax.validation.ConstraintValidatorContext`.
55+ */
4956class BuildConstraintViolationWithTemplateMethod extends Method {
5057 BuildConstraintViolationWithTemplateMethod ( ) {
5158 this
@@ -56,6 +63,10 @@ class BuildConstraintViolationWithTemplateMethod extends Method {
5663 }
5764}
5865
66+ /**
67+ * Taint tracking BeanValidationConfiguration describing the flow of data from user input
68+ * to the argument of a method that builds constraint error messages.
69+ */
5970class BeanValidationConfig extends TaintTracking:: Configuration {
6071 BeanValidationConfig ( ) { this = "BeanValidationConfig" }
6172
You can’t perform that action at this time.
0 commit comments