Skip to content

Commit 24a47fb

Browse files
committed
additional qldoc commentes
1 parent 3545edb commit 24a47fb

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.ql

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,9 @@ import semmle.code.java.dataflow.TaintTracking
1414
import semmle.code.java.dataflow.FlowSources
1515
import DataFlow::PathGraph
1616

17+
/**
18+
* A message interpolator Type that perform Expression Language (EL) evaluations
19+
*/
1720
class ELMessageInterpolatorType extends RefType {
1821
ELMessageInterpolatorType() {
1922
this
@@ -46,6 +49,10 @@ class SetSafeMessageInterpolatorCall extends MethodAccess {
4649
}
4750
}
4851

52+
/**
53+
* A method named `buildConstraintViolationWithTemplate` declared on a subtype
54+
* of `javax.validation.ConstraintValidatorContext`.
55+
*/
4956
class BuildConstraintViolationWithTemplateMethod extends Method {
5057
BuildConstraintViolationWithTemplateMethod() {
5158
this
@@ -56,6 +63,10 @@ class BuildConstraintViolationWithTemplateMethod extends Method {
5663
}
5764
}
5865

66+
/**
67+
* Taint tracking BeanValidationConfiguration describing the flow of data from user input
68+
* to the argument of a method that builds constraint error messages.
69+
*/
5970
class BeanValidationConfig extends TaintTracking::Configuration {
6071
BeanValidationConfig() { this = "BeanValidationConfig" }
6172

0 commit comments

Comments
 (0)